Sensu Go release notes

Versioning

Sensu Go adheres to semantic versioning using MAJOR.MINOR.PATCH release numbers, starting at 5.0.0. MAJOR version changes indicate incompatible API changes. MINOR versions add backward-compatible functionality. PATCH versions include backward-compatible bug fixes.

Upgrading

Read the upgrade guide for information about upgrading to the latest version of Sensu Go.

6.11.0 release notes

January 31, 2024 — The latest release of Sensu Go, version 6.11.0, is now available for download. In this release, we updated our Federal Information Processing Standard (FIPS) builds to use Go’s BoringCrypto feature and to remove the binary’s dynamic link with OpenSSL. Sensu Go 6.11.0 also includes version bumps for Go, jwt, and Logrus.

Read the upgrade guide to upgrade Sensu to version 6.11.0.

IMPROVEMENTS

  • (Commercial feature) FIPS builds now use the BoringCrypto feature in Go instead of the RedHat fork of Go. Binaries are no longer dynamically linked with OpenSSL, and the require-openssl configuration option has been removed from the agent and backend.
  • Upgraded Go version from 1.17.12 to 1.21.3.
  • Upgraded jwt version from 4.0.0 to 4.4.3.
  • Upgraded Logrus version from 1.6.0 to 1.9.3.

6.10.0 release notes

May 2023 — The latest release of Sensu Go, version 6.10.0, is now available for download. Sensu Go 6.10.0 adds a number of features to let the user specify millisecond timestamps in log files, sort silences by expiration time and let them truncate the system network properties from events, which can greatly reduce the event size. It also addresses vulnerability issues related to sessions and refresh tokens, GraphQL and Hashicorp Vault. Finally it also addresses Web UI inconveniences with among other things pagination, entity list view and the dark color scheme.

NOTE: Custom commands making use of $SENSU_ACCESS_TOKEN and $SENSU_REFRESH_TOKEN may be impacted by the changes to sessions and refresh tokens. We recommend setting up an API key and using $SENSU_API_KEY in light of these changes.

IMPROVEMENTS

  • (Commercial feature) In the web UI, a label was added to the Catalog page to make viewing integrations at a glance easier
  • (Commercial feature) For the web UI configuration, added disable BSM (disable_bsm: true) flag to hide BSM from Web UI
  • (Commercial feature) In the web UI, added the ability to sort silences by expiration time
  • Added the flag strip-networks to the Sensu agent to avoid collecting system.networks information
  • Added the log-millisecond-timestamps backend configuration flag to allow for greater logging precision
  • Added a session store to the backend to detect and prevent refresh token reuse

FIXES

  • (Commercial feature) In the web UI, solved a crash when an invalid sort order was specified in the web config
  • (Commercial feature) In the web UI, page pagination sizes are added back
  • (Commercial feature) Fix search parameters persisting when paginating on list views
  • (Commercial feature) In the web UI, handler sets now show configured handlers on handler list page
  • (Commercial feature) In the web UI, fix incorrect URLs displaying in resource labels
  • (Commercial feature) In the web UI, fixed bug on Entity List view where too many subscriptions would cause overflow
  • (Commercial feature) In the web UI, fixed poor color contrast in check result output
  • (Commercial feature) Users are now automatically logged out of the UI after a period of inactivity (12h)
  • Handler errors are now logged at “error” level instead of “info.”
  • Addressed uncontrolled recursion vulnerability (CVE-2022-37315) by upgrading the graphql-go library to v0.8.1
  • Addressed a number of vulnerabilities in the Hashicorp Vault library by upgrading the vault library to v1.2.1-0.20220920125708-57ac8f323643

6.9.2 release notes

March 8, 2023 — The latest release of Sensu Go, version 6.9.2, is now available for download.

Sensu Go 6.9.2 fixes a UI crash on the Service Component detail page. Additionally, we added a GraphQL validator for query node depth to prevent a potential unauthenticated user DDoS.

FIXES:

  • (Commercial feature) In the web UI, added GraphQL validator for query node depth to prevent a potential unauthenticated user DDoS.
  • (Commercial feature) In the web UI, fixed an issue causing crashes when viewing BSM Service Component detail pages.

6.9.1 release notes

December 1, 2022 — The latest release of Sensu Go, version 6.9.1, is now available for download.

Sensu Go 6.9.1 fixes a UI XSS vulnerability issue that could be caused by a malicious check output and addresses a crash in the pipeline edit page. Additionally we addressed issues with the entity details page’s event list, reimplemented the saved searches on the entity list view and fixed a few erroneous URLs.

FIXES:

  • Fixed Graphql Selectors bug that caused the entity page to show events for all entities.
  • (Commercial feature) In the web UI, added labels to Catalog list view items for easier readability.
  • (Commercial feature) In the web UI, fixed the Github URL for feedback suggestions on the “Catalog” view.
  • (Commercial feature) In the web UI, reimplemented saved searches on the entity list view.
  • (Commercial feature) In the web UI, fixed logic on the “Pipeline” edit form that previously caused the UI to crash
  • (Commercial feature) In the web UI, fixed a XSS vulnerability in check result outputs
  • (Commercial feature) In the web UI, removed erroneous links from edit page success messages

6.9.0 release notes

November 1, 2022 — The latest release of Sensu Go, version 6.9.0, is now available for download.

Sensu Go 6.9.0 provides a mix of new features, customer experience improvements, and bug fixes. The new CyberArk integration provides a new way to store your secrets, and Sensu also now supports metric tags in the Graphite plaintext protocol. Additionally, agent websocket connection log entries now include the backend name and authentication requests are now logged with their status. Under the hood, keepalive reconstructions no longer block backend startup — they now run gradually in the background — and we bumped the etcd version to 3.5.5. Last but not least, Sensu Go 6.9.0 implements a number of usability enhancements and bug fixes for the web UI.

Read the upgrade guide to upgrade Sensu to version 6.9.0.

NEW FEATURES:

IMPROVEMENTS:

  • (Commercial feature) In the web UI, when an action is disabled based on a user’s role-based access control (RBAC) permissions, the error message now explains that the issue is due to missing permissions.
  • (Commercial feature) In the web UI, you can now completely hide the Sensu Catalog in the left navigation menu by setting the disabled attribute to true in the GlobalConfig catalog object.
  • (Commercial feature) In the web UI, when a catalog search does not retrieve any results, the user will see a prompt to submit feedback to the Sensu team.
  • (Commercial feature) Updated Sensu packaging to use 0755 permissions for /var/cache/sensu/sensu-agent instead of 0750.
  • Agent websocket connection logging now includes backend entity name.
  • The authentication module now logs successful (INFO) and unsuccessful (ERROR) login attempts.
  • The Sensu agent now ingests Graphite Plaintext Protocol tags and converts them to Sensu metric points with tags. For example, Sensu will ingest the Graphite tag my.series;tag1=value1 1 999999999 as a metric point with the name “my.series” and a “tag1”: “value1” tag.
  • Keepalive reconstruction now runs gradually in the background, which improves stability during backend startup.
  • Upgraded etcd version from 3.5.4 to 3.5.5.

FIXES:

  • (Commercial feature) In the web UI, the built-in subscriptions search query on the Entities page is now properly constructed.
  • (Commercial feature) In the web UI, the check detail page now indicates when Sensu could not fetch a dynamic runtime asset listed in the check definition.
  • (Commercial feature) In the web UI, the mutation dialog now properly reports unauthorized errors.
  • (Commercial feature) In the web UI, saved searches now must have unique names to prevent accidentally overwriting existing saved searches.
  • Fixed an issue that prevented multi-expression, exclusive event filters set to deny from being evaluated properly.

6.8.2 release notes

October 6, 2022 — The latest release of Sensu Go, version 6.8.2, is now available for download.

Sensu Go 6.8.2 includes logging improvements with the addition of check names for failed check execution requests. We also added a label to events with a truncated check output and now automatically restart the agent on Windows platforms after failures. The 6.8.2 patch release also modifies the keepalive startup logic and fixes a number of web UI issues in the Entities and configuration resource pages.

Read the upgrade guide to upgrade Sensu to version 6.8.2.

IMPROVEMENTS:

  • When check output is truncated due to the max_output_size configuration, the events the check produces will include a sensu.io/output_truncated_bytes label.
  • Agent log messages now include the check name when a check execution request fails.
  • On Windows platforms, the Sensu Agent service now automatically restarts after failures.

FIXES:

  • (Commercial feature) In the web UI, restored the silence function on the Entities page.
  • (Commercial feature) In the web UI, resource pages now automatically refresh after creating resources.
  • (Commercial feature) The web UI now displays pipeline definitions under the RAW tab on individual pipeline resource pages.
  • (Commercial feature) In the web UI, corrected the link to the entity reference in the Edit Entity modal.
  • (Commercial feature) In the web UI, errors displayed when deleting and re-adding an asset from asset page have been addressed.
  • (Commercial feature) In the web UI, fixed the validation for resource names and array fields to prevent crashes.
  • (Commercial feature) In the web UI, the configuration resource pages now show an empty list instead of an endless loading indicator for users who do not have the required permissions.
  • (Commercial feature) In the web UI, fixed a bug that could cause a crash when an authorized user does not have an explicitly set username.
  • (Commercial feature) In the web UI, temporarily disabled saved searches on Entity, Services, Silences, and Check pages.
  • (Commercial feature) In the web UI, fixed a bug that prevented individual resource pages from displaying annotations and labels on initial page load.
  • (Commercial feature) In the web UI, when users do not have the required permissions to perform a specific action, the action’s button is now disabled with a tooltip to explain the reason.
  • Modified keepalive startup so that etcd lease errors will not cause sensu-backend crashes.

6.8.1 release notes

September 13, 2022 — The latest release of Sensu Go, version 6.8.1, is now available for download.

Sensu Go 6.8.1 includes web UI fixes for OIDC refresh token expiry and information displayed on the Entities page, as well as a change in how check subdue begin and end times are evaluated.

Read the upgrade guide to upgrade Sensu to version 6.8.1.

FIXES:

  • (Commercial feature) In the web UI, OIDC refresh token requests now properly invoke the sign-in dialog instead of causing an HTTP 404 Not Found error.
  • (Commercial feature) In the web UI, the entity list no longer displays the values of redacted labels.
  • Check subdues are now evaluated as half-open intervals so that they are inclusive of the begin time and +1-second exclusive of the end time. Previously, subdue periods were evaluated as closed intervals and were exclusive of the begin and end times. This change prevents unintended gaps between subdues.

6.8.0 release notes

August 29, 2022 — The latest release of Sensu Go, version 6.8.0, is now available for download.

Sensu Go 6.8.0 delivers a mix of new features, valuable improvements, and helpful fixes. The new /ready API endpoint provides information about backend readiness, and the api-serve-wait-time and agent-serve-wait-time backend configuration options can help prevent instability during sensu-backend startup. The web UI now includes dedicated resource pages for assets, pipelines, role-based access control (RBAC) resources, and secrets. Plus, the resource pages now include details that give you more information about your resources at a glance. We’ve also fixed bugs that could cause backend crashes or result in incorrect event.check.issued values and improved prioritization to prevent keepalive event creation storms.

Read the upgrade guide to upgrade Sensu to version 6.8.0.

NEW FEATURES:

  • Added the api-serve-wait-time and agent-serve-wait-time backend configuration options. Use api-serve-wait-time to delay serving API requests and agent-serve-wait-time to delay accepting agent connections after starting the backend.
  • Added the /ready API endpoint to provide HTTP GET access to information about whether a Sensu instance is ready to serve API requests and accept agent connections.

IMPROVEMENTS:

  • (Commercial feature) The web UI now includes resource pages for assets, pipelines, role-based access control (RBAC) resources, and secrets.
  • (Commercial feature) In the web UI, resource pages now render resources in an infinite list, with a total row count provided at the bottom-right of the list.
  • (Commercial feature) The resource pages in the web UI now display additional information about each resource, such as subscriptions, labels, API versions, and command attribute values.
  • (Commercial feature) In the web UI, the system information modal now displays the name of the connected Sensu backend.
  • Eventd now prioritizes keepalive events over other events to help prevent keepalive event creation storms and mass agent disconnects.

FIXES:

  • (Commercial feature) When the event.check.issued attribute has a null value, the event detail page in the web UI now displays N/A instead of December 31, 1969.
  • Fixed a bug that could cause a sensu-backend crash if the BackendIDGetter encountered etcd client unavailability.

6.7.5 release notes

August 10, 2022 — The latest release of Sensu Go, version 6.7.5, is now available for download.

Sensu Go 6.7.5 upgrades the graphql-go/graphql library to address CVE-2022-37315 in which a malicious actor may craft a query that can crash the backend instance.

Read the upgrade guide to upgrade Sensu to version 6.7.5.

IMPROVEMENTS

6.7.4 release notes

July 15, 2022 — The latest release of Sensu Go, version 6.7.4, is now available for download.

Sensu Go 6.7.4 upgrades the Go version to 1.17.12.

Read the upgrade guide to upgrade Sensu to version 6.7.4.

IMPROVEMENTS

  • Upgraded Go version from 1.17.6 to 1.17.12.

6.7.3 release notes

July 7, 2022 — The latest release of Sensu Go, version 6.7.3, is now available for download.

Sensu Go 6.7.3 includes fixes for the Sensu Catalog sort order and web UI notifications, as well a database issue that could cause backends to crash. We also fixed bugs that affected business service monitoring (BSM) service components and removed limits on Active Directory (AD) and Lightweight Directory Access Protocol (LDAP) searches. This patch release includes a change in how agents execute check requests to prevent check execution still in progress failures.

Read the upgrade guide to upgrade Sensu to version 6.7.3.

IMPROVEMENTS

  • (Commercial feature) Added supported packages for the Sensu backend, Sensu agent, and sensuctl for RHEL 9.

FIXES

  • (Commercial feature) When using the business service monitoring (BSM) feature, service component metadata is now included in the check scope of events the service component generates. Also fixed a bug that could cause BSM service component queries to retrieve events that do not match the specified query expressions.
  • (Commercial feature) Removed a database constraint that could cause backends to crash when running agents on hosts that have many addresses associated with a single network interface.
  • (Commercial feature) Active Directory (AD) and Lightweight Directory Access Protocol (LDAP) searches are no longer limited to 1000 results.
  • (Commercial feature) In the web UI, Sensu Catalog integrations are now listed alphabetically.
  • (Commercial feature) In the web UI’s automated Sensu Plus setup dialog, the value in the Source URL field is no longer truncated.
  • (Commercial feature) In the web UI, pop-up notifications at the bottom of the page are no longer obscured by other content.
  • To prevent check execution still in progress failures, agents will no longer execute check requests with issued timestamps that are equal to or older than the issued timestamp for the last executed check request with the same check name.

6.7.2 release notes

May 12, 2022 — The latest release of Sensu Go, version 6.7.2, is now available for download.

Sensu Go 6.7.2 includes a fix for sensu-backend stability and adds an active poller for PostgreSQL config changes. We’ve also improved the Sensu Plus modal in the web UI.

Read the upgrade guide to upgrade Sensu to version 6.7.2.

IMPROVEMENTS

  • (Commercial feature) In the web UI, the Sensu Plus modal dialog now directs users who already have a Sumo Logic account to follow the instructions to manually set up Sensu Plus.
  • (Commercial feature) In the web UI, the Sensu Plus post-setup modal dialog now indicates success when you use the Copy button to copy the Source URL.
  • (Commercial feature) Added supported packages for the Sensu backend, Sensu agent, and sensuctl for Ubuntu 22.04.
  • Added the etcd-unsafe-no-fsync backend configuration option, which makes it possible to run sensu-backend with an embedded etcd node for testing and development without placing too much load on the file system.
  • Upgraded etcd version from 3.5.2 to 3.5.4.

FIXES

  • (Commercial feature) Fixed a bug that could cause a backend crash when pruning SumoLogicMetricsHandler and TCPStreamHandler resource types.
  • (Commercial feature) Implemented an active poller for PostgreSQL configuration changes.
  • The correct round robin scheduler source (“etcd” or “postgres”) is now printed in events and logs.

6.7.1 release notes

April 28, 2022 — The latest release of Sensu Go, version 6.7.1, is now available for download.

Sensu Go 6.7.1 delivers several improvements and fixes in the Sensu Catalog, along with an update to cron scheduler logging. We’ve also included fixes for data races in schedulerd and agentd.

Read the upgrade guide to upgrade Sensu to version 6.7.1.

IMPROVEMENTS

  • (Commercial feature) Updated install button styling and improved text padding and margins for integration details and configuration dialog icons in the Sensu Catalog.
  • (Commercial feature) In the Sensu Catalog, the integrations list is now sorted alphabetically.
  • The cron scheduler now logs that it is stopping before it begins the process of stopping.

FIXES

  • (Commercial feature) In the Sensu Catalog, fixed an issue that prevented the overwrite function from properly overwriting existing resources.
  • Fixed several data races in schedulerd.
  • Mitigated a data race in agentd sessions.

6.7.0 release notes

April 21, 2022 — The latest release of Sensu Go, version 6.7.0, is now available for download.

Sensu Go 6.7.0 includes a number of new features, improvements and fixes, including Sensu Go’s newest feature, the Sensu Catalog. The Catalog is a marketplace within the Sensu web UI that facilitates new user onboarding and deploying production-ready monitoring in minutes. Sensu Go 6.7.0 also includes metric threshold evaluation, keepalive pipelines, and check subdues. We’ve improved the onboarding workflow for Sensu Plus so you can seamlessly transmit Sensu observability data to Sumo Logic, added support for arrays of strings and objects in the sensu.CheckDependencies Sensu query expression, added an attribute to the GlobalConfig specification, and more. Bug fixes in Sensu Go 6.7.0 include adding pipelines within the event.check object, correcting TCP stream handler max_connections behavior, and detecting ARM platform accurately.

Read the upgrade guide to upgrade Sensu to version 6.7.0.

NEW FEATURES:

  • (Commercial feature) Added the Sensu Catalog, an online marketplace for monitoring and observability integrations that allows you to find, configure, and install integrations directly from the Sensu web UI.
  • Added metric threshold evaluation to provide real-time alerts based on the metrics your Sensu checks collect.
  • Added the keepalive-pipelines agent configuration option, which allows you to specify pipelines for processing keepalive events.
  • Added the check subdues attribute, which you can use to schedule alert-free periods of time directly in check definitions.

IMPROVEMENTS:

FIXES:

  • (Commercial feature) Fixed a bug that could cause pipeline resources to hang when using a TCP stream handler whose max_connections attribute is set to greater than zero.
  • In events, event.check objects now include any pipelines specified in the check configuration.
  • Socket handlers that are interrupted by an error mid-write will no longer cause a sensu-backend panic. Also, socket handlers will now respect their timeout settings after the initial connection is established.
  • Fixed a bug that prevented accurate ARM version detection for sensu-agent.

6.6.6 release notes

February 16, 2022 — The latest release of Sensu Go, version 6.6.6, is now available for download.

Sensu Go 6.6.6 includes several web UI fixes for GraphQL queries. This patch release also contains fixes for the PostgreSQL event store, including improving retry logic when the event store is unavailable, as well as not reverting to etcd as a fallback event store.

Read the upgrade guide to upgrade Sensu to version 6.6.6.

IMPROVEMENTS

  • (Commercial feature) In the web UI, added error type to GraphQL metrics to help track down slow queries.

FIXES

  • (Commercial feature) When the PostgreSQL provider is configured with “strict: true”, the provider will attempt to connect to an unavailable PostgreSQL server indefinitely instead of reverting to etcd as an event store after three failed connection attempts.
  • (Commercial feature) When the PostgreSQL provider is configured to use strict mode, the provider confirms whether the current user has CREATE privileges within the current schema, not the current database.
  • (Commercial feature) The PostgreSQL provider now respects context cancellation and will fail immediately when users issue a termination signal.
  • (Commercial feature) Fixed an issue where metrics would not be recorded when an error occurred.
  • (Commercial feature) In the web UI, fixed an issue with GraphQL queries where an offset of >= 500 couldn’t be used when paging through entities.

6.6.5 release notes

February 3, 2022 — The latest release of Sensu Go, version 6.6.5, is now available for download.

Sensu Go 6.6.5 includes several web UI improvements to reduce cluster load and adds a message to clarify web UI search results for the events and entities pages. This patch release also fixes bugs in round robin scheduling and the PostgreSQL configuration watcher and removes outdated language in an interactive-mode prompt for sensu-backend upgrade.

Read the upgrade guide to upgrade Sensu to version 6.6.5.

IMPROVEMENTS

  • (Commercial feature) When using PostgreSQL, queries for multiple entity states are now more efficient.
  • (Commercial feature) In the web UI, if a search reaches the limit for the events or entities page, the results count at the bottom-right corner of the page now indicates that the total number of matches exceeds the number of results listed.
  • (Commercial feature) In the web UI, several changes help reduce cluster load: federated clusters now query remote clusters in parallel; GraphQL resolvers are no longer invoked if the query deadline has already been reached; and we improved the performance of GraphQL queries to the local cluster.

FIXES

  • (Commercial feature) Fixed a bug in round robin scheduling that could delay notification routing after creating or updating business service monitoring (BSM) service components.
  • (Commercial feature) Fixed a bug in the PostgreSQL configuration watcher that could prevent bsmd from being reenabled after an update.
  • (Commercial feature) In the web UI, fixed a bug that could result in graphql-go nullification of entity.status values greater than math.MaxInt32.
  • Removed Sensu Go 5.x-specific language in the confirmation prompt for sensu-backend upgrade in interactive mode.
  • Resolved unpredictable ringv2 behavior when identical subscriptions are created from different contexts.

6.6.4 release notes

January 26, 2022 — The latest release of Sensu Go, version 6.6.4, is now available for download.

Sensu Go 6.6.4 includes a number of bug fixes, security improvements, and a new metric, sensu_go_event_metric_points_processed. Fixes in this patch release will help prevent backend crashes when PostgreSQL is taken offline and keep backend entity rows from filling up the entities table. The 6.6.4 patch release also includes several improvements to further secure the web UI.

Read the upgrade guide to upgrade Sensu to version 6.6.4.

IMPROVEMENTS

  • (Commercial feature) In the web UI, added the X-Frame-Options header to tell browsers the web application cannot be loaded within an iframe to prevent tailored click-jacking attacks.
  • (Commercial feature) In the web UI, added the HSTS header if TLS has been configured to ensure that the browser loads the application and its requisite assets with a secure connection.
  • (Commercial feature) In the web UI, added the X-Content-Type-Options nosniff header so that browsers respect the given Content-Type header when loading content referenced by a script tag.
  • Added the sensu_go_event_metric_points_processed counter metric and included it in Tessen reporting.

FIXES

  • (Commercial feature) Fixed bugs in business service monitoring (BSM) and round robin scheduling to prevent missed check executions when PostgreSQL round robin scheduling is enabled.
  • (Commercial feature) Fixed a bug that could cause sensu-backend to crash if PostgreSQL was taken offline and restarted.
  • (Commercial feature) Fixed a bug that could cause ephemeral backend entity rows to fill up the entities table in PostgreSQL.
  • (Commercial feature) BSM event selectors can no longer select events outside the service component namespace.
  • (Commercial feature) In the web UI, fixed a bug the prevented HTTP requests from being properly cancelled after a context deadline (timeout) was exceeded.
  • Fixed a bug that could cause the backend to crash if a pipeline references a non-existent handler.

6.6.3 release notes

December 16, 2021 — The latest release of Sensu Go, version 6.6.3, is now available for download.

Sensu Go 6.6.3 includes improvements to reduce load on clusters and support cluster recovery, as well as a backend configuration option for specifying the internal etcd client log level. Fixes in this patch release will help prevent backend crashes when keepalive leases are revoked and when the backend cannot write to the event log file. In addition, this patch fixes issues that could result in a leaked etcd lease and keep the backend from terminating correctly.

Read the upgrade guide to upgrade Sensu to version 6.6.3.

IMPROVEMENTS

  • (Commercial feature) In the web UI, the default polling interval on the entities page is now 30 seconds to help reduce load on clusters. Search results for entities are limited to the first 500 matching entities. Also, the web UI response time and memory usage is substantially improved when opening the entities page in the default state (loading the first page of results, with no search filter applied).
  • (Commercial feature) In the web UI, for instances that use etcd for event storage, search results for events are limited to 25,000 matching events.
  • Added the etcd-client-log-level configuration option for setting the log level of the etcd client used internally within sensu-backend.
  • The agentd daemon now starts up after all other daemons, which improves cluster recovery after the loss of a backend.
  • When using external etcd (the no-embed-etcd backend configuration option is set to true), sensu-backend now crashes when its daemons do not stop within 30 seconds, which can happen due to an intentional shutdown or when database unavailability triggers an internal restart. When using embedded etcd, sensu-backend will still try to avoid crashing to prevent member corruption.

FIXES

  • New agent sessions no longer result in a leaked etcd lease.
  • sensu-backend now prints a warning and continues instead of crashing when it cannot write to the specified event-log-file.
  • Fixed a bug that could cause a crash when keepalive leases are revoked on another backend or by an etcd operator.
  • Fixed an issue that could prevent sensu-backend from terminating correctly.
  • Proxy entity state is now created when it is missing and a matching entity config already exists.

6.6.2 release notes

December 8, 2021 — The latest release of Sensu Go, version 6.6.2, is now available for download.

The Sensu Go 6.6.2 patch release includes improvements in PostgreSQL health check queries and memory consumption for events and entities pages in the web UI. This release also fixes a web UI issue that provided incorrect links for cluster-wide resources.

Read the upgrade guide to upgrade Sensu to version 6.6.2.

IMPROVEMENTS

  • (Commercial feature) Changed the SQL operation for PostgreSQL health check queries to reduce query cost.
  • (Commercial feature) In the web UI, removed Related Entities from individual pages for events and entities to eliminate the substantial memory consumption required to construct the list.

FIXES

  • (Commercial feature) In the web UI, fixed an issue that provided incorrect links for cluster-wide resources. No web UI pages can show events across all namespaces.

6.6.1 release notes

November 29, 2021 — The latest release of Sensu Go, version 6.6.1, is now available for download.

This patch release removes a debugging log entry; adds cron library error information to validation errors for Check and CheckConfig resources; and fixes a web UI bug that expanded the clear silences dialog to the entire frame. In addition, Sensu now sets event timestamps when events are resolved via sensuctl or the web UI.

Read the upgrade guide to upgrade Sensu to version 6.6.1.

IMPROVEMENTS

  • To provide additional context, errors returned by the cron library are now included with the errors Sensu returns when validating Check and CheckConfig resources.
  • Removed a debugging log entry that could cause logs to grow too big, too quickly.

FIXES

  • (Commercial feature) In the web UI, the dialog window for clearing silences no longer expands to the entire frame.
  • Sensu now sets event timestamps when you resolve events with sensuctl or in the web UI.

6.6.0 release notes

November 25, 2021 — The latest release of Sensu Go, version 6.6.0, is now available for download.

This release introduces PostgreSQL event store sorting as well as web UI improvements like support for ANSI color codes and a warning message when editing resources on a cluster with an older version than the gateway cluster. Sensu Go 6.6.0 also adds a label to logged metrics to help identify the backend that generated the metrics, logs connection errors along with context errors, and fixes a bug that could cause a backend crash in case of etcd client unavailability.

Read the upgrade guide to upgrade Sensu to version 6.6.0.

IMPROVEMENTS

  • (Commercial feature) The web UI color themes are updated, and the default theme now uses cyan for elements like the left navigaton menu and breadcrumb navigation text.
  • (Commercial feature) In the web UI, users now receive a warning message when they try to add or edit resources on an cluster that is running an older Sensu backend version than the gateway cluster.
  • (Commercial feature) The web UI now supports ANSI color codes, which improves check output readability when it includes color.
  • (Commercial feature) Added support for sorting for the PostgreSQL event store. In addition, GraphQL can now use the PostgreSQL event store to sort events and get the total event count.
  • Logged metrics now include a backend label. This makes it possible to associate metrics from the metrics log file with the backend they were generated on.
  • Sensu no longer applies zero values for etcd configuration options. This prevents overwriting the etcd-provided default values with null, zero, slice, or empty values.

FIXES

  • When sensu-go cannot connect to etcd, the connection error is now logged along with context errors.
  • Fixed a bug that could cause sensu-backend to crash if the BackendIDGetter encounters etcd client unavailability.

6.5.5 release notes

November 22, 2021 — The latest release of Sensu Go, version 6.5.5, is now available for download.

The Sensu Go 6.5.5 patch release adds two backend configuration options for configuring the API and web UI HTTP servers’ write timeouts and three new GraphQL duration metrics for the metrics log. This release also delivers several bug fixes, including fixes for sensu-backend and sensu-agent panics and failed keepalive lease grant operations.

Read the upgrade guide to upgrade Sensu to version 6.5.5.

IMPROVEMENTS

  • Added the api-write-timeout and dashboard-write-timeout backend configuration options. These options allow you to configure the timeout for the respective HTTP servers’ response writes, which is helpful when requests might take more than a few seconds to complete.
  • Added graphql_duration_seconds, graphql_duration_seconds_sum, and graphql_duration_seconds_count to the metrics log. Also added objectives (0.5, 0.9, 0.99) to the graphql_duration_seconds metric.
  • Added Prometheus metrics for tracking lease operations, with labels for operation type and status, and added sensu_go_lease_ops to the metrics log.

FIXES

  • Updated the assets, pipeline, and eventd duration metrics added in Sensu Go 6.5.2 to use milliseconds for consistency with other duration metrics.
  • Updated the /version API so that responses reflect the versions of external etcd clusters based on the first available etcd endpoint.
  • Fixed a bug that could cause sensu-backend and sensu-agent to panic due to concurrent websocket writes.
  • Sensu no longer logs an error when one side of a websocket tries to close a previously closed connection.
  • Sensu now retries keepalive lease grant operations that fail due to rate limiting.

6.5.4 release notes

October 30, 2021 — The latest release of Sensu Go, version 6.5.4, is now available for download.

This patch releases and updates the sensu-go core/api module.

Read the upgrade guide to upgrade Sensu to version 6.5.4.

FIXES

  • Released and updated the sensu-go core/api module.

6.5.3 release notes

October 29, 2021 — The latest release of Sensu Go, version 6.5.3, is now available for download.

This patch adds the 6.5.2 metrics to the metrics log, fixes bugs in validation for environment variables in JavaScript mutators and asset expansion error handling, and vendors the correct version of sensu-go.

Read the upgrade guide to upgrade Sensu to version 6.5.3.

IMPROVEMENTS

FIXES

  • (Commercial feature) Vendored the correct version of sensu-go.
  • Fixed a bug in API validation that rejected JavaScript mutators that use environment variables available in the environment rather than defined in the mutator env_vars attribute.
  • Fixed a bug that prevented asset expansion errors from being handled.

6.5.2 release notes

October 28, 2021 — The latest release of Sensu Go, version 6.5.2, is now available for download.

The Sensu Go 6.5.2 patch release adds a number of metrics to provide more information about event handling and asset fetching and extraction. In addition, this patch makes operating system environment variables accessible with JavaScript mutators and omits an extraneous attribute that appeared in web UI resource data.

Read the upgrade guide to upgrade Sensu to version 6.5.2.

IMPROVEMENTS

  • For JavaScript mutators, you can now list the names of any environment variables that are available in your environment (in addition to defining environment variables) in the env_vars attribute. This allows you to transform events with metatdata from the Sensu environment, which is useful for downstream processing and filtering when sending Sensu event data for further processing.
  • Added sensu_go_event_handler_duration_sum and sensu_go_event_handler_duration_count and added status and event_type labels to the sensu_go_event_handler_duration metric. These updates allow you to determine whether an event was handled successfully.
  • Added summary metrics for pipelined and pipeline operations to provide insight into how time is spent when pipelined and a pipeline resource handles an event:
    • sensu_go_pipelined_message_handler_duration
    • sensu_go_pipeline_duration
    • sensu_go_pipeline_resolve_duration
    • sensu_go_pipeline_filter_duration
    • sensu_go_pipeline_mutator_duration
    • sensu_go_pipeline_handler_duration
  • Added summary metrics for eventd to provide insight into how time is spent when eventd handles an event:
    • sensu_go_eventd_create_proxy_entity_duration
    • sensu_go_eventd_update_event_duration
    • sensu_go_eventd_bus_publish_duration
    • sensu_go_eventd_liveness_factory_duration
    • sensu_go_eventd_switches_alive_duration
    • sensu_go_eventd_switches_bury_duration
  • Added two metrics to provide insight into how time is spent when an asset is fetched and extracted:
    • sensu_go_asset_fetch_duration
    • sensu_go_asset_expand_duration

FIXES

6.5.1 release notes

October 20, 2021 — The latest release of Sensu Go, version 6.5.1, is now available for download.

This patch fixes several issues in the web UI and adds Prometheus counters for pipeline workflow handler processing.

Read the upgrade guide to upgrade Sensu to version 6.5.1.

IMPROVEMENTS

  • Added Prometheus counters for pipeline workflow handler processing:
    • sensu_go_handler_requests: Number of processed handler requests
    • sensu_go_handler_requests_total: Total number of handler requests invoked

FIXES

  • (Commercial feature) Fixed a bug that could result in an error when listing entities with the PostgreSQL store enabled.
  • (Commercial feature) In the web UI, fixed an issue with the native date and time picker that could cause problems when creating silences.
  • (Commercial feature) In the web UI, fixed a bug that prevented users from editing service components.
  • (Commercial feature) In the web UI, fixed the redirect for deleting entities so that it returns users to the Entities page rather than loading a 404 page for the deleted entity’s details.

6.5.0 release notes

October 13, 2021 — The latest release of Sensu Go, version 6.5.0, is now available for download.

This release includes a number of improvements, specifically exciting new capabilities in the observability pipeline and a major simplification to how “pipelines” are configured. Sensu Go 6.5.0 introduces a new first-class Pipeline resource for defining logical pipeline workflows composed of filters + mutators + handlers. We’re also introducing new streaming handler types: a TCPStreamHandler with TLS support and a SumoLogicMetricsHandler for seamless integration with the Sumo Logic Continuous Intelligence platform. Enhancements in the web UI include a completely overhauled configuration management system (with new views for the Checks, Filters, Handlers, and Mutators pages) and behind-the-scenes improvements that pave the way for even more new configuration management capabilities in future releases. Read the full release notes below for all the details!

Read the upgrade guide to upgrade Sensu to version 6.5.0.

NEW FEATURES:

  • (Commercial feature) Added Sensu Plus, a built-in integration you can use to transmit your Sensu observability data to Sumo Logic via the Sumo Logic HTTP Logs and Metrics Source.
  • (Commercial feature) Added support for Sumo Logic metrics handlers and TCP stream handlers. The enterprise/pipeline/v1 API endpoints provide HTTP access for retrieving and configuring Sumo Logic metrics handlers and TCP stream handlers.
  • (Commercial feature) You can now view resource data for events, entities, and configuration resources like checks and handlers directly in the web UI.
  • (Commercial feature) In the web UI, you can execute individual checks on demand either according to existing subscriptions or on specific agents by adding and removing subscriptions without making changes to the saved check subscriptions.
  • (Commercial feature) Added Prometheus metrics for TCP stream handlers:
    • sensu_go_tcp_stream_handler_events: Total number of events handled by the TCP stream handler
    • sensu_go_tcp_stream_handler_errors: Total number of errors produced by the TCP stream handler
    • sensu_go_tcp_stream_handler_latency: Distribution of handler latencies, in milliseconds, for the TCP stream handler
    • sensu_go_tcp_stream_handler_connection_acquisition_latency: Distribution of connection acquisition latencies (how long it takes to acquire a connection from the connection pool), in milliseconds, within the TCP stream handler
  • New pipelines resource allows you to specify event filters, mutators, and handlers in a single workflow instead of listing filters and mutators in handler definitions. You can reference pipelines in your check definitions. The /pipelines API endpoint provides HTTP access for retrieving pipeline data and configuring pipelines, and you can use sensuctl to manage pipelines. Upgrade your Sensu agents to Sensu Go 6.5.0 to use pipelines resources.
  • JavaScript mutators are now available. JavaScript mutators are evaluated by the Otto JavaScript VM as JavaScript programs, which enables greater throughput at scale than pipe mutators.
  • Check definitions now include the pipelines attribute for specifying pipeline resources to use for the check’s observability events.
  • Added platform metrics logging to log core Sensu metrics in InfluxDB Line Protocol format, along with the disable-platform-metrics, platform-metrics-log-file, and platform-metrics-logging-interval backend configuration options for managing the platform metrics logging feature.
  • Event logging is no longer a commercial-only feature.
  • You can now set sensuctl environment variables for a single sensuctl command or with sensuctl configure.

IMPROVEMENTS:

  • Added environment variables SENSU_BACKEND_ETCD_CLIENT_USERNAME and SENSU_BACKEND_ETCD_CLIENT_PASSWORD for connecting to external etcd via username and password authentication instead of certificate authentication. There are no corresponding command line flags — these configuration options must be set via environment variables.
  • You can now add an API key when you initialize the backend to make automated cluster setup and deployment more straightforward.
  • Events now include the name of the agent that processed the event in the processed_by attribute to help you determine which agent processed an event executed by a proxy check request or a POST request to the events API.
  • Added the ignore-already-initialized backend configuration option, which you can use to suppress the “already initialized” response and return an exit code 0 if a cluster has already been initialized.
  • Upgraded Go version from 1.16.5 to 1.17.1.

SECURITY:

FIXES:

  • Sensuctl env now properly lists SENSU_API_KEY and SENSU_TIMEOUT as options for exporting environment variables. In addition, sensuctl command exec now properly adds the SENSU_API_KEY and SENSU_TIMEOUT variables to the command’s environment.
  • Fixed a bug that could cause a crash when running the backend on darwin/arm64 and compressing a wrapped resource.
  • Fixed a bug that could result in an etcd error if the number of silences in a given transaction exceeded etcd’s default maximum number of operations per transaction.

6.4.3 release notes

September 1, 2021 — The latest release of Sensu Go, version 6.4.3, is now available for download.

This patch fixes a deadlock in the event log writer.

Read the upgrade guide to upgrade Sensu to version 6.4.3.

FIXES:

6.4.2 release notes

August 31, 2021 — The latest release of Sensu Go, version 6.4.2, is now available for download.

This patch adds a backend configuration attribute that allows parallel event log encoding, as well as two summary metrics for the /metrics API endpoint.

Read the upgrade guide to upgrade Sensu to version 6.4.2.

FIXES:

  • (Commercial feature) Added the event-log-parallel-encoders backend configuration attribute, which allows you to indicate whether Sensu should use parallel JSON encoders for event logging instead of the default (a single JSON encoding worker). This fixes a bottleneck in the event logging feature.

IMPROVEMENTS:

  • Added sensu_go_agentd_event_bytes and sensu_go_store_event_bytes summary metrics to the /metrics API endpoint. sensu_go_agentd_event_bytes tracks the sizes of events, in bytes, received by agentd on the backend. sensu_go_store_event_bytes tracks event sizes, in bytes, received by the etcd store on the backend.

6.4.1 release notes

August 25, 2021 — The latest release of Sensu Go, version 6.4.1, is now available for download.

This patch includes fixes that improve forward- and backward-compatibility for backends and prevent sensuctl cluster member-list crashes, as well as changes to the default log levels for webd, the API, and the sensu-agent.

Read the upgrade guide to upgrade Sensu to version 6.4.1.

FIXES:

  • (Commercial feature) For LDAP configurations, the allowed_groups attribute is omitted if not populated. This change improves backend reliability with older versions of federation and sensuctl.
  • Fixed a bug to prevent sensuctl cluster member-list crashes when the etcd response header is nil.
  • Fixed a sensu-backend init regression that returned exit status 0 if the store was already initialized.
  • Sensu Go OSS can now be built on darwin/arm64.

IMPROVEMENTS:

  • (Commercial feature) The default webd log level is now warn.
  • The default log level for the Sensu API and sensu-agent is now warn (instead of info).
  • The sensu-backend now reports when it is ready to process events at the warn level.
  • You can now create resources with fields that are unknown to Sensu. This change improves forward-compatibility with newer Sensu backends.

6.4.0 release notes

June 28, 2021 — The latest release of Sensu Go, version 6.4.0, is now available for download.

The latest release of Sensu Go, version 6.4.0, is now available for download. This release includes a number of feature improvements and important bug fixes. We upgraded the embedded etcd from version 3.3 to 3.5 for improved stability and security. The sensu-backend init command now supports a wait flag, which indicates that the backend should repeatedly try to establish a connection to etcd until it is successful – fantastic news for Kubernetes users who want to bootstrap new Sensu Go clusters with external etcd! Check timeout also now works properly on Windows hosts: the Sensu Go agent can terminate check sub-processes on check execution timeout. This release fixes a bug that prevented deregistration events from working. There’s something for everyone in this release!

Read the upgrade guide to upgrade Sensu to version 6.4.0.

NEW FEATURES:

IMPROVEMENTS:

  • Added etcd-log-level backend configuration option for setting the log level for the embedded etcd server.
  • Added wait flag for the sensu-backend init command, which indicates the backend should repeatedly try to establish a connection to etcd until it is successful.
  • The timeout flag for sensu-backend init is now treated as a duration instead of seconds (example duration format is 10s for 10 seconds or 5m for 5 minutes). Values less than 1 second and integer values will be interpreted as seconds.
  • Added sensu_go_keepalives Prometheus metric to count keepalive statuses over time and help identify instability due to keepalive failure.
  • Upgraded Go version from 1.13.15 to 1.16.5.
  • Upgraded etcd version from 3.3.22 to 3.5.0. As a result, 6.4.0 is not backward-compatible with previous Sensu versions. Read the upgrade instructions for details about creating a full etcd database backup before you upgrade to Sensu Go 6.4.0. Also, in etcd 3.5, some Prometheus metric names changed. Read the etcd documentation for details.

FIXES:

  • (Commercial feature) Selector statements that begin with quotes no longer cause an error if they follow the && operator.
  • (Commercial feature) Fixed a bug that allowed PostgresConfig resources to include a namespace attribute. Also, invalid PostgresConfig resources can no longer be created.
  • Fixed a bug that resulted in OK keepalive status after shutting down the agent.
  • Fixed a bug in role-based access control (RBAC) that caused incorrect HTTP API statuses and web UI crashes when role bindings referred to missing roles. The API now returns status 403 with a message to explain that the referenced role is missing.
  • Fixed a bug that prevented deregistration events from validating due to empty event.check.subscriptions arrays.
  • Fixed a bug that caused Windows agents to handle command timeouts improperly.

6.3.0 release notes

May 26, 2021 — The latest release of Sensu Go, version 6.3.0, is now available for download.

This release includes several new features, enhancements, bug fixes, and usability improvements. Construct a top-level business service-centric view for distributed infrastructure and applications with a preview of Business Service Monitoring! Rate-limit Sensu Go agent transport connections without using a separate load balancer. Use an API key to authenticate sensuctl, which is handy when automating Sensu Go configuration (for example CI pipelines) and other actions (like ad hoc check execution requests). The 6.3.0 release also improves the PostgreSQL store batching capabilities, raising the event processing throughput ceiling for most deployments. Check out the release notes below for more details — there’s so much to love about this release!

Read the upgrade guide to upgrade Sensu to version 6.3.0.

NEW FEATURES:

IMPROVEMENTS:

  • (Commercial feature) The agent transport health API endpoint repsonse now includes PostgreSQL health information.
  • (Commercial feature) Added the poll_interval default preferences attribute to the GlobalConfig resource so administrators can adjust how often the web UI pages poll for new data.
  • (Commercial feature) In the web UI, some form fields now include examples of valid values.
  • Added the --api-key global flag for sensuctl commands. Use this flag with sensuctl commands to bypass username/password authentication.
  • Logs for JavaScript filter evaluation errors now include more context.
  • Concatenated YAML files now support carriage return and line feed (CRLF).
  • Removed extraneous shell auto-completion suggestions for sensuctl.

FIXES:

  • (Commercial feature) Migrated the PostgreSQL event store from github.com/lib/pq to github.com/jackc/pgx so that PostgreSQL batching works properly.
  • (Commercial feature) In the web UI, error messages are now visible in dark mode.
  • Fixed a bug that could cause the scheduler to crash when using round robin checks.
  • Fixed a bug that calculated build information for every keepalive in OSS builds.
  • SIGHUP no longer triggers an internal restart.

6.2.7 release notes

April 1, 2021 — The latest release of Sensu Go, version 6.2.7, is now available for download.

This patch includes fixes for potential deadlocks in metricsd and agentd and crashes in the scheduler and tessend as well as for a bug that calculated build information for every keepalive.

Read the upgrade guide to upgrade Sensu to version 6.2.7.

FIXES:

  • (Commercial feature) Fixed a potential deadlock in metricsd that could occur when performing an internal restart.
  • Fixed a potential deadlock in agentd due to the unit test timing out in the build pipeline.
  • Fixed a bug that could cause the scheduler to crash when using round robin checks.
  • Fixed a bug that calculated build information for every keepalive in OSS builds.
  • Fixed a potential crash in tessend that could occur if the ringv2.Event.Value has a zero length.
  • Fixed a bug that allowed some etcd watchers to try to process watch events that contain invalid pointers.

6.2.6 release notes

March 25, 2021 — The latest release of Sensu Go, version 6.2.6, is now available for download.

This patch fixes a bug that allowed PostgreSQL round robin scheduling to use a separate PostgreSQL connection for each subscription and improves the validation for POST/PUT requests for enterprise API endpoints.

Read the upgrade guide to upgrade Sensu to version 6.2.6.

FIXES:

  • (Commercial feature) Fixed a bug that allowed PostgreSQL round robin scheduling to use a separate PostgreSQL connection for each subscription. PostgreSQL round robin scheduling now uses exactly one extra PostgreSQL connection.
  • (Commercial feature) Improved the validation for POST/PUT requests for enterprise API endpoints. Sensu now checks the type and namespace in the request body against the type and namespace in the request URL.

6.2.5 release notes

February 2, 2021 — The latest release of Sensu Go, version 6.2.5, is now available for download.

This patch fixes a bug regarding the event occurrences_watermark property. This bug interfered with the property’s expected behavior when using event filters like the popular fatigue check filter.

Read the upgrade guide to upgrade Sensu to version 6.2.5.

FIXES:

  • (Commercial feature) Fixed a bug that prevented occurrences_watermark from incrementing for non-zero events when using the PostgreSQL datastore.

6.2.4 release notes

January 28, 2021 — The latest release of Sensu Go, version 6.2.4, is now available for download.

This patch fixes a bug that prevented federation/v1.Cluster from appearing in the response for sensuctl describe-type all and resolves a web UI performance issue for PostgreSQL users.

Read the upgrade guide to upgrade Sensu to version 6.2.4.

FIXES:

  • (Commercial feature) federation/v1.Cluster now appears in the sensuctl describe-type all response.
  • (Commercial feature) Fixed a performance issue that affected the web UI when using the PostgreSQL datastore.

6.2.3 release notes

January 21, 2021 — The latest release of Sensu Go, version 6.2.3, is now available for download.

This patch fixes two bugs: one that could prevent the agent-managed-entity configuration option from working properly and one that caused sensuctl dump output to include events from all namepaces rather than the specified namespace.

Read the upgrade guide to upgrade Sensu to version 6.2.3.

FIXES:

  • Fixed a bug that prevented the agent-managed-entity configuration attribute from working properly when no labels are defined.
  • Fixed a bug where sensuctl dump output included events from all namespaces the user had access permissions for rather than events from only the specified namespace.

6.2.2 release notes

January 14, 2021 — The latest release of Sensu Go, version 6.2.2, is now available for download.

This patch fixes bugs that prevented PostgreSQL round robin scheduling from working properly.

Read the upgrade guide to upgrade Sensu to version 6.2.2.

FIXES:

  • (Commercial feature) Fixed a bug that could improperly enable PostgreSQL round robin scheduling after creating a PostgreSQL configuration.
  • (Commercial feature) Fixed a bug that prevented PostgreSQL round robin scheduling if the namespace and check names were more than 63 characters long, combined.

6.2.1 release notes

January 11, 2021 — The latest release of Sensu Go, version 6.2.1, is now available for download.

This patch fixes bugs that could prevent users from enabling PostgreSQL after upgrading from 5.x or configuring agent labels and annotations with flags. In addition, sensuctl prune hook and sensuctl prune check now work as expected and users can no longer edit agent-managed entities in the web UI.

Read the upgrade guide to upgrade Sensu to version 6.2.1.

FIXES:

  • (Commercial feature) Fixed a bug that prevented users from enabling PostgreSQL as the event store after upgrading from 5.x.
  • (Commercial feature) The sensuctl prune hook and sensuctl prune check subcommands now work as expected.
  • (Commercial feature) In the web UI, fixed a bug that allowed users to edit Sensu agent-managed entities.
  • Fixed a bug that generated a small amount of extra etcd or PostgreSQL traffic upon keepalive failure.
  • In silenced entries, the expire field now represents the configured number of seconds until the entry should be deleted rather than the entry’s remaining duration.
  • Labels and annotations are now configuration options for sensu-agent.

6.2.0 release notes

December 17, 2020 — The latest release of Sensu Go, version 6.2.0, is now available for download.

The latest release of Sensu Go, version 6.2.0, is now available for download! Sensu Go 5.x and configuration management users rejoice: this release adds support for agent local configuration (that is, agent.yml) managed entities! Agent entities may now be managed exclusively by their agents when sensu-agent is started with the new agent-managed-entity configuration option. This makes it more straightforward to migrate from Sensu Go 5.x to 6.x, as existing agent entity management workflows like Puppet will just work with the new option enabled! Note that you will not be able to edit agent-managed entities via the backend REST API or web UI.

Sensu Go 6.2.0 includes significant feature enhancements such as PostgreSQL backend round robin check scheduling for increased reliability and consistency, an updated format for silenced entry dates and durations in sensuctl tabular-format output, and a /health API endpoint for agent WebSocket transport status. This release delivers important bug fixes like consistently using event_id in logs and eliminating the sensuctl error when Vault provider SSL certificates do not exist on the local system. Also, enterprise/prune/v1alpha no longer requires cluster-wide permissions; users with limited permissions can put it to use in their namespaces!

Read the upgrade guide to upgrade Sensu to version 6.2.0.

NEW FEATURES:

IMPROVEMENTS:

  • (Commercial feature) Refactored entity limiter to ensure that warning messages about approaching a license’s entity or entity class limit are now only displayed for users with create or update permissions for the license.
  • (Commercial feature) The [enterprise/prune/v1alpha API] endpoints194 and the sensuctl interface now require less-broad permissions.
  • Adjusted the format for silenced entry dates and durations in sensuctl tabular-format output. For all silenced entries, the begin date is now listed in RFC 3339 format. For silenced entries that have not begun, the list displays the expiration date in RFC 3339 format. For silenced entires with no expiration date, the list displays -1. For silenced entries that have begun, the list displays the duration (for example, 1m30s).
  • Sensuctl and sensu-backend now ask users to retype their passwords when creating a new password in interactive mode.

FIXES:

  • (Commercial feature) Sensuctl no longer produces an error when SSL certificates for the Vault provider do not exist on the local system.
  • Logs now consistently use event_id rather than event_uuid.
  • Sensuctl commands that only contain subcommands now exit with status code 46 when no arguments or incorrect arguments are given.
  • The sensuctl dump command now includes a description.
  • Sensuctl command descriptions now have consistent capitalization.
  • Use of the config-file flag is no longer order-dependent.

6.1.4 release notes

December 16, 2020 — The latest release of Sensu Go, version 6.1.4, is now available for download.

This patch fixes a bug that could cause a crash in the backend API, addresses a case where agents do not honor HTTP proxy environment variables, and improves the error message reported by the agent when asset checksums do not match expectations.

Read the upgrade guide to upgrade Sensu to version 6.1.4.

FIXES:

  • Fixed a bug that could cause a panic in the backend core/v2/entities API.
  • The agent asset fetching mechanism now respects HTTP proxy environment variables when trusted-ca-file is configured.
  • When an asset artifact retrieved by the agent does not match the expected checksum, the logged error now includes the size of the retrieved artifact and more clearly identifies the expected and actual checksums.

6.1.3 release notes

November 9, 2020 — The latest release of Sensu Go, version 6.1.3, is now available for download.

This patch fixes a bug that caused event updates to fail with an error about a null value in the occurrences column. This bug only affects Sensu instances that use PostgreSQL as the event store.

Read the upgrade guide to upgrade Sensu to version 6.1.3.

FIXES:

  • (Commercial feature) For instances that use PostgreSQL as the event store, fixed a bug that caused event updates to fail with an error message about a null value in the occurrences column.

6.1.2 release notes

October 28, 2020 — The latest release of Sensu Go, version 6.1.2, is now available for download.

This patch release resolves a backend and agent crash related to JavaScript execution.

Read the upgrade guide to upgrade Sensu to version 6.1.2.

FIXES:

  • Fixed a bug related to JavaScript execution that could cause a crash in the backend and agent.

6.1.1 release notes

October 22, 2020 — The latest release of Sensu Go, version 6.1.1, is now available for download.

This patch release includes a number of bug fixes that affect proper hook handling with sensuctl prune and sensuctl dump, entity creation via sensuctl create, form validation for subscription names in the web UI, and permissions for PATCH requests, among other fixes.

Read the upgrade guide to upgrade Sensu to version 6.1.1.

FIXES:

  • (Commercial feature) sensuctl prune now properly handles hooks when pruning resources.
  • (Commercial feature) Fixed a bug that returned incorrect != results for label selectors when no labels were defined.
  • (Commercial feature) In the web UI, fixed a bug that could cause a GraphQL no claims error when a user’s access token was no longer valid instead of displaying the sign-out dialog window.
  • (Commercial feature) In the web UI, form validation for subscription names now matches allowed values.
  • Fixed a bug that prevented sensu-agent from shutting down correctly.
  • Entities are now properly created using sensuctl create.
  • Per-entity subscriptions now persist with PATCH requests.
  • Any user with update permissions for a resource can now make PATCH requests for that resource.
  • HookConfig can now be exported via sensuctl dump. Also, sensuctl dump now properly logs API errors.
  • eventd errors now include additional context for debugging.

6.1.0 release notes

October 5, 2020 — The latest release of Sensu Go, version 6.1.0, is now available for download.

This release delivers significant performance and stability gains, feature enhancements, and several bug fixes. The web UI is now much snappier, and its search is redesigned with an improved syntax and suggestions! Monitor even more services and infrastructure when using the PostgreSQL store: batched Sensu event writes and improved indexing allows a single Sensu Go deployment to process and query more data than ever before. If you’re using Prometheus client libraries to instrument your applications, the Sensu Go agent can now scrape and enrich those metrics! And if you’re collecting metrics in other formats like Nagios PerfData, you can use the new output metric tags feature to enrich those metrics too! The sensuctl prune command also received some love, and it now loads and prunes configuration resources from multiple files!

Read the upgrade guide to upgrade Sensu to version 6.1.0.

NEW FEATURES:

IMPROVEMENTS:

  • (Commercial feature) Improved logging for OIDC authentication providers. Also added disable_offline_access OIDC spec attribute, which provides a workaround for authorization servers that do not support the offline_access scope.
  • (Commercial feature) Added indexed field and label selectors to the PostgreSQL event store to improve performance for PostgreSQL event store queries with field and label selectors.
  • Added Prometheus transformer for extracting metrics from check output using the Prometheus Exposition Text Format.
  • Added the output_metric_tags attribute for checks so you can apply custom tags to enrich metric points produced by check output metric extraction.
  • A warning is now logged when you request a dynamic runtime asset that does not exist.
  • The trusted CA file is now used for agent, backend, and sensuctl asset retrieval.
  • Per-entity subscriptions (such as entity:entityName) are always available for agent entities, even you remove subscriptions via the core/v2/entities API endpoints.
  • Updated the Sensu TimescaleDB Handler to write tags as a JSON object instead of an array of objects, which facilitates tags queries.
  • Updated the Sensu Go Data Source for Grafana plugin to support using API keys, fetching resources from all namespaces, using Sensu’s built-in resposne filtering, grouping aggregation results by attribute, and number of other improvements.

FIXES:

  • (Commercial feature) Fixed a bug in sensuctl dump that allowed polymorphic resources (e.g., secrets providers and authentication providers) to dump other providers of the same type.
  • (Commercial feature) Check output is no longer truncated in the event log file when the max output size is set and the PostgreSQL event store is enabled.
  • (Commercial feature) Sensuctl prune now handles multi-file/multi-url input correctly.
  • (Commercial feature) Fixed a bug where PostgreSQL errors could cause the backend to panic.
  • (Commercial feature) Fixed a bug where PostgreSQL would refuse to store event with a negative check status.
  • The backend will no longer start if the web UI TLS configuration is not fully specified.
  • The agent entity is now included in data passed to the stdin for the command process.
  • Improved check scheduling to prevent stale proxy entity data when using cron or round robin schedulers.
  • Fixed a bug that resulted in incorrect entity listings for agent entities created via the API instead of sensu-agent.
  • When downloading assets, Sensu now closes the response body after reading from it.
  • Fixed a crash in the backend and agent related to JavaScript execution.

6.0.0 release notes

August 10, 2020 — The latest release of Sensu Go, version 6.0.0, is now available for download.

With Sensu Go 6.0.0, you can control everything through the API. You can still use configuration management tools to bootstrap agent entities, but you don’t need to! Our new agent entity management feature via the backend configuration API nearly eliminates the need for external (or out-of-band) configuration management for Sensu, which allows you to manage agent entity subscriptions and automate the discovery of system facts without updating agent local configuration files. Run a sensuctl command, click a button in the web UI, or execute a custom check plugin!

Read the upgrade guide to upgrade Sensu to version 6.0.0.

BREAKING CHANGES FOR SENSU 6.0:

  • The database schema for entities has changed. As a result, after you complete the steps to upgrade to Sensu 6.0 (including running the sensu-backend upgrade command), you will not be able to use your database with older versions of Sensu.
  • For Sensu Go instances built from source, the web UI is now a standalone product — it is no longer included with the Sensu backend. Visit the Sensu Go Web repository for more information.
  • After initial creation, you cannot change your sensu-agent entity configuration by modifying the agent’s configuration file.

NEW FEATURES:

  • (Commercial feature) Sensu now logs a warning when secrets cannot be sent to an agent because mTLS is not enabled.
  • (Commercial feature) Added JavaScript functions sensu.EventStatus, sensu.FetchEvent, and sensu.ListEvents to the filter execution environment so you can now query the Sensu event store for other events within the filter namespace.
  • (Commercial feature) Docker-only Sensu now binds to the hostname of containers instead of localhost. Docker images now set their own default values for environment variables SENSU_AGENT_API_URL, SENSU_BACKEND_API_URL, SENSU_BACKEND_ETCD_INITIAL_CLUSTER, SENSU_BACKEND_ETCD_ADVERTISE_CLUSTER, SENSU_BACKEND_ETCD_INITIAL_ADVERTISE_PEER_URLS, SENSU_BACKEND_ETCD_LISTEN_CLIENT_URLS, and ETCD_LISTEN_PEER_URLS.
  • (Commercial feature) Added Linux packages for 386; armv5, armv6, and armv7; MIPS hard float, MIPS LE hard float, and MIPS 64 LE hard float; ppc64le; and s390x architectures. Review the supported platforms page for a complete list of Sensu’s supported platforms.
  • (Commercial feature) Added Sensu query expression sensu.CheckDependencies.
  • Added binary-only distributions for FreeBSD armv5, armv6, and armv7 and Linux ppc64le and s390x.
  • Added the is_silenced Boolean attribute to the event.Check object to indicate whether the event was silenced at the time it was processed.

IMPROVEMENTS:

  • (Commercial feature) Added support for the memberOf attribute in Active Directory (AD).
  • (Commercial feature) Added more descriptive information for errors in the federated web UI.
  • The dead and handleUpdate methods in keepalived now use EntityConfig and EntityState respectively.
  • The dead() and createProxyEntity() methods in eventd now use corev3.EntityConfig and corev3.EntityState.
  • Agent entity updates now ignore state-related fields.
  • You can now manage Sensu agent configuration via the HTTP API.
  • For sysvinit services, Sensu now passes users’ secondary groups (that is, groups other than the Sensu user group) to chroot, which gives the Sensu agent and backend access to the file access writes that are granted to the secondary groups.
  • Output of sensuctl asset add now includes help for using the runtime asset.
  • For role bindings and cluster role bindings, subjects.name values can now include unicode characters, and roleRef.type and subjects.type values are now automatically capitalized.
  • Improved logging for the agent WebSocket connection.
  • Improved the wording of the secret provider error message.
  • Fewer keys in etcd are now stored for agents.
  • Keepalive and round robin scheduling leases are now dealt with more efficiently.
  • Upgraded Go version from 1.13.7 to 1.13.15.
  • Upgraded etcd version from 3.3.17 to 3.3.22.

FIXES:

  • (Commercial feature) Label selectors now work as expected with multiple requirements for events.
  • (Commercial feature) Fixed an issue that prevented broken secrets providers from surfacing their errors.
  • (Commercial feature) Fixed a bug for PostgreSQL datastores that could prevent GraphQL from retrieving all pages when fetching events in a namespace with more than 1000 total events, resulting in an unexpected error.
  • (Commercial feature) Fixed a bug that could cause the backend to panic in case of PostgreSQL errors.
  • Sensu now logs and returns and error if it cannot find a mutator.
  • Errors produced in the agent by assets, check validation, token substitution, and event unmarshaling are logged once again.
  • The User-Agent header is now set only upon on new client creation rather than upon each request.
  • When the Sensu agent cannot parse the proper CA certificate path, Sensu logs this in the error message.
  • Fixed a bug where highly concurrent event filtering could result in a panic.
  • Fixed a bug where nil labels or annotations in an event filtering context would require you to explicitly check whether the annotations or labels are undefined. With this fix, labels and annotations are always defined (although they may be empty).
  • Fixed the log entry field for the check’s name in schedulerd.

5.21.5 release notes

March 25, 2021 — The latest release of Sensu Go, version 5.21.5, is now available for download.

The Sensu 5.21.5 patch release improves the validation for POST/PUT requests for enterprise API endpoints.

Read the upgrade guide to upgrade Sensu to version 5.21.5.

FIXES:

  • (Commercial feature) Improved the validation for POST/PUT requests for enterprise API endpoints. Sensu now checks the type and namespace in the request body against the type and namespace in the request URL.

5.21.4 release notes

March 9, 2021 — The latest release of Sensu Go, version 5.21.4, is now available for download.

This patch release fixes a bug that caused the SIGHUP signal to restart the sensu-backend.

Read the upgrade guide to upgrade Sensu to version 5.21.4.

FIXES:

  • Fixed a bug that caused the SIGHUP signal used for log rotation to restart the sensu-backend.

5.21.3 release notes

October 14, 2020 — The latest release of Sensu Go 5, version 5.21.3, is now available for download.

This patch release includes a few fixes to improve stability and correctness.

Read the upgrade guide to upgrade Sensu to version 5.21.3.

FIXES:

  • Fixed a bug where HTTP connections could be left open after downloading assets.
  • Fixed a bug where event filter or asset filter execution could cause a crash.
  • (Commercial feature) Fixed a bug where PostgreSQL would refuse to store event with a negative check status.

5.21.2 release notes

August 31, 2020 — The latest release of Sensu Go, version 5.21.2, is now available for download.

This patch release includes two fixes: one for PostgreSQL errors that could cause the backend to panic and one to ensure that failed check events are written to the event log file.

Read the upgrade guide to upgrade Sensu to version 5.21.2.

FIXES:

  • (Commercial feature) Fixed a bug where PostgreSQL errors could cause the backend to panic.
  • Failed check events are now written to the event log file.

5.21.1 release notes

August 5, 2020 — The latest release of Sensu Go, version 5.21.1, is now available for download.

This patch release includes fixes for a web UI crash when interacting with namespaces that contain 1000 or more events and regressions in logging various agent errors as well as an enhancement that provides additional context to WebSocket connection errors logged by the backend.

Read the upgrade guide to upgrade Sensu to version 5.21.1.

IMPROVEMENTS:

  • Backend log messages related to connection errors on the agent WebSocket API now provide more context about the error.

FIXES:

  • Fixed a potential web UI crash when fetching events in namespace with 1000 or more events.
  • Fixed a regression that prevented errors produced in the agent by assets, check validation, token substitution, or event unmarshaling from being logged.

5.21.0 release notes

June 15, 2020 — The latest release of Sensu Go, version 5.21.0, is now available for download.

The latest release of Sensu Go, version 5.21.0, is now available for download! This release delivers several enhancements and fixes. The most significant enhancements involve user management: you can now generate a password hash, specify the resulting hash in your user definitions without having to store cleartext passwords, and create and update these users using sensuctl create. You can also reset user passwords via the backend API. We also tuned Sensu Go agent logging and changed the default log level from warning to info. Plus, we crushed a number of nasty bugs: checks configured with missing hooks can no longer crash the agent, proxy check request errors do not block scheduling for other entities, and more!

Read the upgrade guide to upgrade Sensu to version 5.21.0.

NEW FEATURES:

  • (Commercial feature) Added entity count and limit for each entity class in the tabular title in the response for sensuctl license info (in addition to the total entity count and limit).
  • (Commercial feature) Added Linux amd64 OpenSSL-linked binaries for the Sensu agent and backend, with accompanying require-fips and require-openssl configuration options for the agent and backend.
  • Added sensuctl user hash-password command to generate password hashes.
  • Added the ability to reset passwords via the backend API and sensuctl user reset-password.

IMPROVEMENTS:

FIXES:

  • The password verification logic when running sensuctl user change-password is now included in the backend API rather than sensuctl.
  • Errors in publishing proxy check requests no longer block scheduling for other entities.
  • Using the --chunk-size flag when listing namespaces in sensuctl now works properly.
  • The agent no longer immediately exits in certain scenarios when components are disabled.
  • Fixed a bug that could cause a GraphQL query to fail when querying a namespace that contained event data in excess of 2 GB.

5.20.2 release notes

May 26, 2020 — The latest release of Sensu Go, version 5.20.2, is now available for download.

This patch release adds username to the API request log to help operators with troubleshooting and user activity reporting, as well as validation for subjects in role-based access control (RBAC) role binding and cluster role binding. Release 5.20.2 also temporarily disables process discovery so we can investigate and resolve its performance impact on the backend (increased CPU and memory usage).

Read the upgrade guide to upgrade Sensu to version 5.20.2.

NEW FEATURES:

  • The API request log now includes the username.

FIXES:

  • (Commercial feature) Process discovery in the agent is temporarily disabled.
  • The system’s libc_type attribute is now properly populated for Ubuntu entities.
  • Single-letter subscriptions are now allowed.
  • Subjects are now validated in RBAC role binding and cluster role binding.
  • Sensuctl command assets can now be retrieved and installed from Bonsai.

5.20.1 release notes

May 15, 2020 — The latest release of Sensu Go, version 5.20.1, is now available for download.

This patch release includes a bug fix that affects the web UI federated homepage gauges when using the PostgreSQL datastore and several fixes for the data displayed in the web UI entity details.

Read the upgrade guide to upgrade Sensu to version 5.20.1.

FIXES:

  • (Commercial feature) Fixes a bug that prevented the federated homepage in the web UI from retrieving the keepalive and event gauges when PostgreSQL was configured as the event datastore.
  • (Commercial feature) The memory_percent and cpu_percent processes attributes are now properly displayed in the web UI.
  • In the web UI, the entity details page no longer displays float type (which applies only for MIPS architectures). Also on entity details pages, the system’s libc type is now listed and process names are no longer capitalized.

5.20.0 release notes

May 12, 2020 — The latest release of Sensu Go, version 5.20.0, is now available for download.

This release delivers several new features, substantial improvements, and important fixes. One exciting new feature is agent local process discovery to further enrich entities and their events with valuable context. Other additions include a web UI federation view that provides a single pane of glass for all of your Sensu Go clusters and token substitution for assets. And Windows users rejoice! This release includes many Windows agent fixes, as well as agent log rotation capabilities!

Read the upgrade guide to upgrade Sensu to version 5.20.0.

NEW FEATURES:

IMPROVEMENTS:

FIXES:

  • (Commercial feature) Database connections no longer leak after queries to the cluster /health API.
  • In the web UI, any leading and trailing whitespace is now trimmed from the username when authenticating.
  • The web UI preferences dialog now displays only the first five groups a user belongs to, which makes the sign-out button more accessible.
  • In the web UI, the deregistration handler no longer appears as undefined on the entity details page.
  • You can now escape quotes to express quoted strings in token substitution templates.
  • The Windows agent now accepts and remembers arguments passed to service run and service install.
  • The Windows agent now synchronizes writes to its log file, so the file size will update with every log line written.
  • The Windows agent now logs to both console and log file when you use service run.

5.19.3 release notes

May 4, 2020 — The latest release of Sensu Go, version 5.19.3, is now available for download. This is a patch release with many improvements and bug fixes, including a fix to close the event store when the backend restarts, a global rate limit for fetching assets, and fixes for goroutine leaks. Sensu Go 5.19.3 also includes several web UI updates, from fixes to prevent crashes to new color-blindness modes.

Read the upgrade guide to upgrade Sensu to version 5.19.3.

FIXES:

  • The event store now closes when the backend restarts, which fixes a bug that allowed Postgres connections to linger after the backend restarted interally.
  • The etcd event store now returns exact matches when retrieving events by entity (rather than prefixed matches).
  • sensu-backend init now logs any TLS failures encountered during initialization.
  • sensuctl logout now resets the TLS configuration.
  • env_vars values can now include the equal sign.
  • Error logs now include underlying errors encountered when fetching an asset.
  • The log level is now WARNING when an asset is not installed because none of the filters match.
  • Fixes a bug in the web UI that could cause labels with links to result in a crash.
  • Fixes a bug in the web UI that could cause the web UI to crash when using an unregistered theme.
  • Fixes a bug that could cause the backend to crash.
  • Fixes a bug in multi-line metric extraction that appeared in Windows agents.
  • Fixes an authentication bug that restarted the sensu-backend when agents disconnected.
  • Fixes a bug that meant check state and last_ok were not computed until the second instance of the event.
  • Fixes a bug that caused messages like “unary invoker failed” to appear in the logs.
  • Fixes several goroutine leaks.
  • Fixes a bug that caused the backend to crash when the etcd client received the error “etcdserver: too many requests.”

IMPROVEMENTS:

  • In the web UI, color-blindness modes are now available.
  • In the web UI, labels and annotations with links to images will now be displayed inline.
  • Adds a global rate limit for fetching assets to prevent abusive asset retries, which you can configure with the assets-burst-limit and assets-rate-limit configuration options for the agent and backend.
  • Adds support for restarting the backend via SIGHUP.
  • Adds a timeout flag to sensu-backend init.
  • Deprecated flags for sensuctl silenced update subcommand have been removed.

5.19.2 release notes

April 27, 2020 — The latest release of Sensu Go, version 5.19.2, is now available for download. This patch release adds two database connection pool parameters for PostgreSQL so you can configure the maximum time a connection can persist before being destroyed and the maximum number of idle connections to retain. The release also includes packages for Ubuntu 19.10 and 20.04.

Read the upgrade guide to upgrade Sensu to version 5.19.2.

FIXES:

  • (Commercial feature) Adds SQL database connection pool parameters max_conn_lifetime and max_idle_conns to store/v1.PostgresConfig132.

IMPROVEMENTS:

  • Sensu packages are now available for Ubuntu 19.10 (Eoan Ermine) and 20.04 (Focal Fossa). Review the supported platforms page for a complete list of Sensu’s supported platforms and the installation guide to install Sensu packages for Ubuntu.

5.19.1 release notes

April 13, 2020 — The latest release of Sensu Go, version 5.19.1, is now available for download. This is a patch release with a number of bug fixes, including several that affect keepalive events, as well as an addition to the help response for sensu-backend start and sensu-agent start: the default path for the configuration file.

Read the upgrade guide to upgrade Sensu to version 5.19.1.

FIXES:

  • (Commercial feature) Fixed a bug that caused the PostgreSQL store to be enabled too late upon startup, which caused keepalive bugs and possibly other undiscovered bugs.
  • Keepalives now fire correctly when using the PostgreSQL event store.
  • Keepalives can now be published via the HTTP API.
  • sensu-agent no longer allows configuring keepalive timeouts that are shorter than the keepalive interval.
  • Eventd no longer mistakes keepalive events for checks with TTL.
  • Keepalives now generate a new event universally unique identifier (UUID) for each keepalive failure event.
  • Agents now correctly reset keepalive switches on reconnect, which fixes a bug that allowed older keepalive timeout settings to persist.
  • Token substitution templates can now express escape-quoted strings.
  • The REST API now uses a default timeout of 3 seconds when querying etcd health.
  • Pipe handlers now must include a command.
  • The response for sensu-backend start --help and sensu-agent start --help now includes the configuration file default path.
  • The system’s libc_type attribute is now populated on Alpine containers.

5.19.0 release notes

March 30, 2020 — The latest release of Sensu Go, version 5.19.0, is now available for download. This release is packed with new features, improvements, and fixes, including our first alpha feature: declarative configuration pruning to help keep your Sensu instance in sync with Infrastructure as Code workflows. Other exciting additions include the ability to save and share your filtered searches in the web UI, plus a new matches substring match operator that you can use to refine your filtering results! Improvements include a new created_by field in resource metadata and a float_type field that stores whether your system uses hard float or soft float. We’ve also added agent and sensuctl builds for MIPS architectures, moved Bonsai logs to the debug level, and added PostgreSQL health information to the /health API payload.

Read the upgrade guide to upgrade Sensu to version 5.19.0.

NEW FEATURES:

IMPROVEMENTS:

  • (Commercial feature) The health endpoint now includes PostgreSQL health information.
  • Resource metadata now includes the created_by field, which Sensu automatically populates with the name of the user who created or last updated each resource.
  • The agent now discovers entity libc type, VM system, VM role, and cloud provider.
  • System type now includes the float_type field, which stores the float type the system is using (hard float or soft float).
  • The Bonsai client now logs at the debug level rather than the info level.
  • The store can now create wrapped resources.
  • Tessen now collects the type of store used for events (etcd or postgres) and logs numbers of authentication providers, secrets, and secrets providers. Tessen data helps us understand how we can improve Sensu, and all Tessen transmissions are logged locally for complete transparency.

FIXES:

  • Fixed a bug where event.Check.State was not set for events passing through the pipeline or written to the event log.
  • Fixed a bug that allowed the agent to connect to a backend using a nonexistent namespace.
  • Fixed a bug that allowed subscriptions to be empty strings.
  • Corrected the HTTP status codes for unauthenticated and permission denied errors in the REST API.
  • Fixed a bug where check history was incorrectly formed when using the PostgreSQL event store.

5.18.1 release notes

March 10, 2020 — The latest release of Sensu Go, version 5.18.1, is now available for download. This release fixes bugs that caused SQL migration failure on PostgreSQL 12, nil pointer panic due to OICD login, and sensu-backend restart upon agent disconnection. It also includes a reliability improvement — a change to use the gRPC client rather than the embedded etcd client.

Read the upgrade guide to upgrade Sensu to version 5.18.1.

FIXES:

  • (Commercial feature) Fixed a bug that caused SQL migrations to fail on PostgreSQL 12.
  • (Commercial feature) Fixed a bug where OIDC login could result in a nil pointer panic.
  • Changed to using the gRPC client (rather than the embedded etcd client) to improve reliability and avoid nil pointer panics triggered by shutting down the embedded etcd client.
  • The Sensu backend no longer hangs indefinitely if a file lock for the asset manager cannot be obtained. Instead, the backend returns an error after 60 seconds.
  • Fixed a bug that caused sensu-backend to restart when agents disconnected.
  • Fixed a bug where the backend would panic on some 32-bit systems.

5.18.0 release notes

February 25, 2020 — The latest release of Sensu Go, version 5.18.0, is now available for download. This release delivers a number of improvements to the overall Sensu Go experience. From automatic proxy entity creation to unique Sensu event IDs, it’s now much easier to use and troubleshoot your monitoring event pipelines! If you’re working behind an HTTP proxy, you can now manage remote Sensu Go clusters, as sensuctl now honors proxy environment variables (for example, HTTPS_PROXY). This release also includes a number of fixes for usability bugs, making for the most polished release of Sensu Go yet, so go ahead and give it a download!

Read the upgrade guide to upgrade Sensu to version 5.18.0.

IMPROVEMENTS:

  • The event.entity.entity_class value now defaults to proxy for POST /events requests.
  • If you use the core/v2/events API to create a new event with an entity that does not already exist, the sensu-backend will automatically create a proxy entity when the event is published.
  • Sensuctl now accepts Bonsai asset versions that include a prefix with the letter v (for example, v1.2.0).
  • The /version API now retrieves the Sensu agent version for the Sensu instance.
  • Log messages now indicate which filter dropped an event.
  • Sensu now reads and writes initializationKey to and from EtcdRoot, with legacy support (read-only) as a fallback.
  • Sensu will now check for an HTTP response other than 200 OK response when fetching assets.
  • Updated Go version from 1.13.5 to 1.13.7.

FIXES:

  • (Commercial feature) Label selectors and field selectors now accept single and double quotes to identify strings.
  • Fixed a bug that prevented wrapped resources from having their namespaces set by the default sensuctl configuration.
  • Fixed a bug that prevented API response filtering from working properly for core/v2/silenced API endpoints.
  • Improved event payload validation for the core/v2/events API so that events that do not match the URL parameters on the /events/:entity/:check endpoint are rejected.
  • Sensuctl now supports the http_proxy, https_proxy, and no_proxy environment variables.
  • The auth/test endpoint now returns the correct error messages.

5.17.2 release notes

February 19, 2020 — The latest release of Sensu Go, version 5.17.2, is now available for download. This release fixes a bug that could prevent commercial features from working after internal restart.

Read the upgrade guide to upgrade Sensu to version 5.17.2.

FIXES:

  • Fixed a bug that could cause commercial HTTP routes to fail to initialize after an internal restart, preventing commercial features from working.

5.17.1 release notes

January 31, 2020 — The latest release of Sensu Go, version 5.17.1, is now available for download. This release fixes a web UI issue that cleared selected filters when sorting an event list and a bug that prevented certain .tar assets from extracting. It also includes sensuctl configuration improvements.

Read the upgrade guide to upgrade Sensu to version 5.17.1.

IMPROVEMENTS:

  • Asset names may now include capital letters.
  • Running the sensuctl configure command now resets the sensuctl cluster configuration.
  • When you use --trusted-ca-file to configure sensuctl, it now detects and saves the absolute file path in the cluster configuration.

FIXES:

  • (Commercial feature) When a silencing entry expires or is removed, it is also removed from the silences view in the web UI.
  • Fixed a bug that prevented .tar assets from extracting if they contain hardlinked files.
  • In the web UI, sorting an event list view no longer clears the selected filters.

5.17.0 release notes

January 28, 2020 — The latest release of Sensu Go, version 5.17.0, is now available for download. This is a significant release, with new features, improvements, and fixes! We’re ecstatic to announce the release of secrets management, which eliminates the need to expose sensitive information in your Sensu configuration. When a Sensu component such as a check or handler requires a secret (like a username or password), Sensu will be able to fetch that information from one or more external secrets providers (for example, HashiCorp Vault) and provide it to the Sensu component via temporary environment variables. Secrets management allows you to move secrets out of your Sensu configuration, giving you the ability to safely and confidently share your Sensu configurations with your fellow Sensu users! This release also includes per-entity keepalive event handler configuration, a sought-after feature for users who have migrated from Sensu 1.x to Sensu Go.

Read the upgrade guide to upgrade Sensu to version 5.17.0.

NEW FEATURES:

  • (Commercial feature) Added HTTP API for secrets management, with Sensu’s Env secrets provider and support for HashiCorp Vault secrets management. The secrets provider resource is implemented for checks, mutators, and handlers.
  • Added the keepalive-handlers agent configuration option to specify the keepalive handlers to use for an entity’s events.

IMPROVEMENTS:

  • (Commercial feature) Upgraded the size of the events auto-incremented ID in the PostgreSQL store to a 64-bit variant, which allows you to store many more events and avoids exhausting the sequence.
  • (Commercial feature) Initialization via sensu-backend init is now implemented for Docker.
  • (Commercial feature) UPN binding support has been re-introduced via the default_upn_domain configuration attribute.
  • In the web UI, labels that contain URLs are now clickable links.
  • Added event.entity.name as a supported field for the fieldSelector query parameter.
  • In the web UI, users with implicit permissions to a namespace can now display resources within that namespace.
  • Explicit access to namespaces can only be granted via cluster-wide RBAC resources.
  • You can now omit the namespace from an event in HTTP POST /events requests.
  • Added support for the --format flag in the sensuctl command list subcommand.

FIXES:

  • (Commercial feature) Fixed a bug where the event check state was not present when using the PostgreSQL event store.
  • (Commercial feature) Agent TLS authentication does not require a license.
  • Fixed a memory leak in the entity cache.
  • Fixed a bug that prevented sensuctl entity delete from returning an error when attempting to delete a non-existent entity.
  • In the web UI, fixed a bug that duplicated event history in the event timeline chart.
  • sensuctl command assets installed via Bonsai now use the sensuctl namespace.
  • Fixed a bug where failing check TTL events could occur if keepalive failures had already occurred.

5.16.1 release notes

December 18, 2019 — The latest release of Sensu Go, version 5.16.1, is now available for download. This release fixes a performance regression that caused API latency to scale linearly as the number of connected agents increased and includes a change to display the sensu_go_events_processed Prometheus counter by default.

Read the upgrade guide to upgrade Sensu to version 5.16.1.

IMPROVEMENTS

  • The sensu_go_events_processed Prometheus counter now initializes with the success label so the count is always displayed.

FIXES:

  • The performance regression introduced in 5.15.0 that caused API latency to scale linearly as the number of connected agents increased is fixed.

5.16.0 release notes

December 16, 2019 — The latest release of Sensu Go, version 5.16.0, is now available for download. This is another important release, with many new features, improvements, and fixes. We introduced an initialization subcommand for new installations that allows you to specify an admin username and password instead of using a pre-defined default. We also added new backend configuration options to help you take advantage of etcd auto-discovery features and agent configuration options you can use to define a timeout period for critical and warning keepalive events.

New web UI features include a switcher that makes it easier to switch between namespaces in the dashboard, breadcrumbs on every page, OIDC authentication in the dashboard, a drawer that replaces the app bar to make more room for content, and more.

We also fixed issues with sensuctl dump and sensuctl cluster health, installing sensuctl commands via Bonsai, and missing namespaces in keepalive events and events created through the agent socket interface.

Read the upgrade guide to upgrade Sensu to version 5.16.0.

IMPORTANT:

  • For Debian- and RHEL-family installations, the backend is no longer seeded with a default admin username and password. Users will need to run ‘sensu-backend init’ on every new installation and specify an admin username and password.

NEW FEATURES:

  • (Commercial feature) Users can now authenticate with OIDC in the dashboard.
  • (Commercial feature) Label selectors now match the event’s check and entity labels.
  • Added a new configuration option, etcd-client-urls, to use with sensu-backend when it is not operating as an etcd member. The configuration option is also used by the new sensu-backend init subcommand.
  • Added the ‘sensu-backend init’ subcommand.
  • Added the etcd-discovery and etcd-discovery-srv configuration options to sensu-backend, which allow users to take advantage of the embedded etcd’s auto-discovery features.
  • Added the keepalive-critical-timeout configuration option to define the time after which a critical keepalive event should be created for an agent and the keepalive-warning-timeout configuration option, which is an alias of keepalive-timeout for backward compatibility.

IMPROVEMENTS:

  • (Commercial feature) The entity limit warning message is now displayed less aggressively and the warning threshold is proportional to the entity limit.
  • A new switcher in the web UI makes it easier to switch namespaces in the dashboard. Access the new component from the drawer or with the shortcut ctrl+k. For users who have many namespaces, the switcher now includes fuzzy search and improved keyboard navigation.
  • In the web UI, replaced the app bar with an omnipresent drawer to increase the available space for content. Each page also now includes breadcrumbs.
  • In the Sensu documentation, links now point to the version of the product being run instead of the latest, which may be helpful when running an older version of Sensu.

FIXES:

  • sensuctl dump help now shows the correct default value for the format flag.
  • Installing sensuctl commands via Bonsai will now check for correct labels before checking if the asset has 1 or more builds.
  • Listing assets with no results now returns an empty array.
  • Fixed a panic that could occur when creating resources in a namespace that does not exist.
  • Fixed an issue where keepalive events and events created through the agent’s socket interface could be missing a namespace.
  • Fixed an issue that could cause ‘sensuctl cluster health’ to hang indefinitely.
  • (Commercial feature) The agent.yml.example file shipped with Sensu Agent for Windows packages now uses DOS-style line endings.

5.15.0 release notes

November 19, 2019 — The latest release of Sensu Go, version 5.15.0, is now available for download. This is a significant release for a number of reasons. The changes to licensing make 100% of Sensu Go’s commercial features available for free to all users, up to your first 100 entities! This release also includes the long-awaited cluster federation features, supporting multi-cluster authentication, RBAC policy replication, and a single pane of glass for your Sensu monitoring data! We added support for API keys, making it easy to integrate with the Sensu API (you no longer need to manage JWTs). In addition, the 5.15.0 release includes support for sensu-backend environment variables and bug fixes that improve error logging for mutator execution and flap detection weighting for checks.

Read the upgrade guide to upgrade Sensu to version 5.15.0.

IMPORTANT: Sensu’s free entity limit is now 100 entities. All commercial features are available for free in the packaged Sensu Go distribution for up to 100 entities. You will receive a warning when you approach the 100-entity limit (at 75%).

If your Sensu instance includes more than 100 entities, contact us to learn how to upgrade your installation and increase your limit. Read the blog announcement for more information about our usage policy.

NEW FEATURES:

SECURITY:

  • (Commercial feature) Removed support for UPN binding without a binding account or anonymous binding, which allows Sensu to effectively refresh claims during access token renewal.

IMPROVEMENTS:

  • You can now use colons and periods in all resource names (except users).

FIXES:

  • Added better error logging for mutator execution.
  • Fixed the order of flap detection weighting for checks.
  • Fixed the pprof server so it only binds to localhost.
  • Moved corev2.BonsaiAsset to bonsai.Asset and moved corev2.OutdatedBonsaiAsset to bonsai.OutdatedAsset.

5.14.2 release notes

November 4, 2019 — The latest release of Sensu Go, version 5.14.2, is now available for download. This release includes an etcd upgrade, fixes that improve stability and performance, and a Sensu Go package for RHEL 8.

Read the upgrade guide to upgrade Sensu to version 5.14.2.

IMPROVEMENTS:

  • Upgraded etcd to 3.3.17.
  • Added build package for RHEL 8 (el/8).
  • Sensu Go now uses serializable event reads, which helps improve performance.

FIXES:

  • As a result of upgrading etcd, TLS etcd clients that lose their connection will successfully reconnect when using the no-embed-etcd configuration option.
  • Check TTL and keepalive switches are now correctly buried when associated events and entities are deleted. As a result, Sensu now uses far fewer leases for check TTLs and keepalives, which improves stability for most deployments.
  • Corrected a minor UX issue in interactive filter commands in sensuctl.

5.14.1 release notes

October 16, 2019 — The latest release of Sensu Go, version 5.14.1, is now available for download. This release adds Prometheus gauges for check schedulers and fixes several bugs, including a bug discovered in 5.14.0 that prevented OIDC authentication providers from properly loading on start-up.

Read the upgrade guide to upgrade Sensu to version 5.14.1.

NEW FEATURES:

  • Added Prometheus gauges for check schedulers.

FIXES:

  • (Commercial feature) Sensuctl will not incorrectly warn of entity limits for unlimited licenses.
  • (Commercial feature) oidc authentication providers will now properly load on start-up.
  • When opening a Bolt database that is already open, sensu-agent will not hang indefinitely.
  • Running sensuctl dump for multiple resource types with the output format as YAML will not result in separators being printed to stdout instead of the specified file.
  • Fixed a crash in sensu-backend (panic: send on closed channel).

5.14.0 release notes

October 8, 2019 — The latest release of Sensu Go, version 5.14.0, is now available for download. This release includes feature additions like two new configuration options for backends using embedded etcd and a new SemVer field in entity resources. In addition, this release includes enhanced TLS authentication support and bug fixes that restore check execution after a network error and enable round robin schedule recovery after quorum loss.

Read the upgrade guide to upgrade Sensu to version 5.14.0.

NEW FEATURES:

  • The web UI now includes an error dialog option that allows users to wipe the application’s persisted state (rather than having to manually wipe their local/session storage). This can help in the rare case that something in the persisted state is leading to an uncaught exception.
  • The web UI now respects the system preference for operating systems with support for selecting a preferred light or dark theme.
  • sensuctl dump can now list the types of supported resources with sensuctl dump --types.
  • The entity resource now includes the sensu_agent_version field, which reflects the Sensu Semantic Versioning (SemVer) version of the agent entity.
  • There are two new advanced configuration options for sensu-backend using embedded etcd: etcd-heartbeat-interval and etcd-election-timeout.

IMPROVEMENTS:

  • (Commercial feature) Added support for mutual TLS authentication between agents and backends.
  • (Commercial feature) Added support for CRL URLs for mTLS authentication.
  • (Commercial feature) Support agent TLS authentication is usable with the sensu-backend.
  • In the web UI, feedback is directed to Discourse rather than the GitHub repository’s Issues page to facilitate discussion about feature requests.
  • In the web UI, when a user lands on a page inside a namespace that no longer exists or they do not have access to, the drawer opens to that namespace switcher to help clarify next steps.
  • Updated Go version from 1.12.3 to 1.13.1.

FIXES:

  • (Commercial feature) sensuctl on Windows can now create Postgres resources.
  • (Commercial feature) Fixed a bug that resulted in event metrics being ignored when using the Postgres store.
  • Fixed a bug that caused checks to stop executing after a network error.
  • Fixed a bug that prevented sensuctl create with stdin from working.
  • Splayed proxy checks are executed every interval (instead of every interval + interval * splay_coverage).
  • Proxy entity labels and annotations are now redacted in the web UI as expected.
  • Fixed a bug in the ring that prevented round robin schedules from recovering after quorum loss.
  • Updated web UI so that unauthorized errors emitted while creating silences or resolving events are caught and a notification is presented to communicate what occurred.
  • Web UI does not report internal errors when a user attempts to queue an ad hoc check for a keepalive.
  • Fixed a bug in the web UI that may have prevented users with appropriate roles from resolving events, queuing checks, and creating silenced entries.
  • Asset builds are not separated into several assets unless the the tabular format is used in sensuctl asset list.
  • The ‘flag accessed but not defined’ error is corrected in sensuctl asset outdated.

5.13.2 release notes

September 19, 2019 — The latest release of Sensu Go, version 5.13.2, is now available for download. This is a stability release that fixes a bug for users who have the PostgreSQL event store enabled.

Read the upgrade guide to upgrade Sensu to version 5.13.2.

FIXES:

  • Metrics handlers now correctly receive metric points when the postgresql event store is enabled.

5.13.1 release notes

September 10, 2019 — The latest release of Sensu Go, version 5.13.1, is now available for download. This is a stability release with bug fixes for multi-build asset definitions causing a panic when no matching filters are found.

Read the upgrade guide to upgrade Sensu to version 5.13.1.

FIXES:

  • Multi-build asset definitions with no matching filters will no longer cause a panic.
  • Fixed the oidc authentication provider resource.

5.13.0 release notes

September 9, 2019 — The latest release of Sensu Go, version 5.13.0, is now available for download. This is one of the most user-friendly releases yet! Sensuctl now integrates with Bonsai, the Sensu asset hub, making it easier than ever to fetch and use countless Sensu monitoring plugins and integrations. Additionally, sensuctl now supports loading resource configuration files (for example, checks) from directories and URLs. But that’s not all! Sensuctl now provides a subcommand for exporting its configuration and API tokens to your shell environment. Use sensuctl to provide cURL and custom scripts with fresh API access information!

Read the upgrade guide to upgrade Sensu to version 5.13.0.

NEW FEATURES:

  • Sensuctl now integrates with Bonsai, the Sensu asset hub. Run a single sensuctl command to add an asset to your Sensu cluster (for example, sensuctl asset add sensu/sensu-pagerduty-handler:1.1.0). Check for outdated assets (new releases available) with the outdated subcommand (for example, sensuctl asset outdated).
  • Sensuctl now supports the env subcommand for exporting sensuctl configuration and API tokens to your shell environment (for example, eval $(sensuctl env)).
  • Sensuctl now supports loading multiple resource configuration files (for example, checks and handlers) from directories! Sensuctl can also load a file using a URL (for example, sensuctl create -r -f ./checks and sensuctl create -f https://my.blog.ca/sensu-go/check.yaml).

FIXES:

  • Sensuctl interactive check create and update modes now have none for the metric output format as the first highlighted option instead of nagios-perfdata.
  • Fixed a bug where silences would not expire on event resolution.

5.12.0 release notes

August 26, 2019 — The latest release of Sensu Go, version 5.12.0, is now available for download. There are some exciting feature additions in this release, including the ability to output resources to a file from sensuctl and more granular control of check and check hook execution with an agent allow list. Additionally, this release includes the ability to delete assets and more stability fixes around watcher functionality.

Read the upgrade guide to upgrade Sensu to version 5.12.0.

IMPORTANT:

Due to changes in the release process, Sensu binary-only archives are now named following the pattern sensu-go_5.12.0_$OS_$ARCH.tar.gz, where $OS is the operating system name and $ARCH is the CPU architecture. These archives include all files in the top level directory. Read the installation guide for the latest download links.

NEW FEATURES:

  • Operators can now authenticate to Sensu via OpenID Direct Connect (OIDC) using sensuctl. Read the authentication documentation for details.
  • Added sensu-agent and sensuctl binary builds for FreeBSD.
  • Added sensuctl dump command to output resources to a file or stdout, making it easier to back up your Sensu backends.
  • Agents can now be configured with a list of executables that are allowed to run as check and hook commands. Read the agent reference for more information.

IMPROVEMENTS:

  • Assets now support defining multiple builds, reducing the number of individual assets needed to cover disparate platforms in your infrastructure.
  • (Commercial feature) Namespaces listed in both the web UI and sensuctl are now limited to the namespace to which the user has access.
  • Hooks now support the use of assets.
  • The event.check.name field has been added as a supported field selector.
  • Both the API and sensuctl can now be used to delete assets.
  • The use of ProtoBuf serialization/deserialization over WebSocket can now be negotiated between agent and backend.
  • Web UI performance has been improved for deployments with many events and entities.
  • The resource caches can now rebuild themselves in case of failures.
  • Event and entity resources can now be created via the API without an explicit namespace. The system will refer to the namespace in the request URL.
  • Event and entity resources can now be created via the API using the POST verb.

SECURITY:

  • To prevent writing sensitive data to logs, the backend no longer logs decoded check result and keepalive payloads.

FIXES:

  • Tabular display of filters via sensuctl now displays && or || as appropriate for inclusive and exclusive filters, respectively.
  • Requesting events from the GET /events/:entity API endpoint now returns events only for the specified entity.
  • Running sensuctl config view without configuration no longer causes a crash.
  • Creating an entity via sensuctl with the --interactive flag now prompts for the entity name when it is not provided on the command line.
  • Check hooks with stdin: true now receive actual event data on stdin instead of an empty event.
  • Some issues with check scheduling and updating have been fixed by refactoring the backend’s watcher implementation.

KNOWN ISSUES:

  • Authentication via OIDC is not yet supported in the web UI.
  • Deleting an asset will not remove references to said asset. It is the operator’s responsibility to remove the asset from the runtime_assets field of the check, hook, filter, mutator, or handler.
  • Deleting an asset will not remove the tarball or downloaded files from disk. It is the operator’s responsibility to clear the asset cache if necessary.

5.11.1 release notes

July 18, 2019 — The latest release of Sensu Go, version 5.11.1, is now available for download. This is a stability release with bug fixes for UPN format binding token renewal and addition of agent heartbeats and configurable WebSocket connection negotiation.

Read the upgrade guide to upgrade Sensu to version 5.11.1.

FIXES:

  • Fixed access token renewal when UPN format binding was enabled.
  • The agent now sends heartbeats to the backend to detect network failures and reconnect more quickly.
  • The default handshake timeout for the WebSocket connection negotiation was lowered from 45 to 15 seconds and is now configurable.

5.11.0 release notes

July 10, 2019 — The latest release of Sensu Go, version 5.11.0, is now available for download. There are some exciting feature additions in this release, including the ability to delete resources from sensuctl and manage filter and mutator resources in the web UI. Additionally, this release includes bug fixes for proxy checks and enhanced performance tuning for the PostgreSQL event store.

Read the upgrade guide to upgrade Sensu to version 5.11.0.

NEW FEATURES:

  • The Sensu web UI now includes a filters page that displays available event filters and filter configuration.
  • (Commercial feature) Manage your Sensu event filters from your browser: Sensu’s web UI now supports creating, editing, and deleting filters.
  • The Sensu web UI now includes a mutators page that displays available mutators and mutator configuration.
  • (Commercial feature) Manage your Sensu mutators from your browser: Sensu’s web UI now supports creating, editing, and deleting mutators.
  • Sensuctl now includes the sensuctl delete command, letting you use resource definitions to delete resources from Sensu in the same way as sensuctl create. Read the sensuctl reference for more information.
  • Assets now include a headers attribute to include HTTP headers in requests to retrieve assets, allowing you to access secured assets. Read the asset reference for examples.
  • Sensu agents now support the disable-assets configuration option, allowing you to disable asset retrieval for individual agents. Read the agent reference for examples.
  • Sensu binary-only distributions are now available as zip files.

IMPROVEMENTS:

FIXES:

  • The web UI now returns an error when attempting to create a duplicate check or handler.
  • Silenced entries are now retrieved from the cache when determining whether an event is silenced.
  • The Sensu API now returns an error when trying to delete an entity that does not exist.
  • The agent WebSocket connection now performs basic authorization.
  • The core/v2/events API now correctly applies the current timestamp by default, fixing a regression in 5.10.0.
  • Multiple nested set handlers are now flagged correctly, fixing an issue in which they were flagged as deeply nested.
  • Round robin proxy checks now execute as expected in the event of updated entities.
  • The Sensu backend now avoids situations of high CPU usage in the event that watchers enter a tight loop.
  • Due to incompatibility with the Go programming language, Sensu is incompatible with RHEL 5. As a result, RHEL 5 has been removed as a supported platform for all versions of Sensu Go.

5.10.2 release notes

June 27, 2019 — The latest release of Sensu Go, version 5.10.2, is now available for download. This is a stability release with a bug fix for expired licenses.

Read the upgrade guide to upgrade Sensu to version 5.10.2.

FIXES:

  • Sensu now handles expired licenses as expected.

5.10.1 release notes

June 25, 2019 — The latest release of Sensu Go, version 5.10.1, is now available for download. This is a stability release with key bug fixes for proxy checks and entity deletion.

Read the upgrade guide to upgrade Sensu to version 5.10.1.

FIXES:

  • The proxy_requests entity_attributes are now all considered when matching entities.
  • Events are now removed when their corresponding entity is deleted.

5.10.0 release notes

June 19, 2019 — The latest release of Sensu Go, version 5.10.0, is now available for download. There are some exciting feature additions in this release, including the ability to perform advanced filtering in the web UI and use PostgreSQL as a scalable event store. This release also includes key bug fixes, most notably for high CPU usage.

Read the upgrade guide to upgrade Sensu to version 5.10.0.

NEW FEATURES:

  • (Commercial feature) The Sensu web UI now includes fast, predictive filtering for viewing checks, entities, events, handlers, and silences, including the ability to filter based on custom labels. Select the filter bar and start building custom views using suggested attributes and values. For more information, read the web UI docs.
  • Free Sensu instances can now delete entities in the web UI entities page. Read the web UI docs to get started using the Sensu web UI.
  • (Commercial feature) Sensu now supports using an external PostgreSQL instance for event storage in place of etcd. PostgreSQL can handle significantly higher volumes of Sensu events, letting you scale Sensu beyond etcd’s storage limits. Read the datastore reference for more information.
  • Sensu now includes a cluster ID API endpoint and sensuctl cluster id command to return the unique Sensu cluster ID. Read the core/v2/cluster API endpoint docs for more information.

IMPROVEMENTS:

  • The sensuctl create command now supports specifying the namespace for a group of resources at the time of creation, allowing you to replicate resources across namespaces without manual editing. Read the sensuctl reference for more information and usage examples.
  • Sensu cluster roles can now include permissions to manage your Sensu license using the license resource type. Read the RBAC reference to create a cluster role.
  • The web UI now displays up to 100,000 events and entities on the homepage.

FIXES:

  • Sensu now optimizes scheduling for proxy checks, solving an issue with high CPU usage when evaluating proxy entity attributes.
  • The Sensu API now validates resource namespaces and types in request bodies to ensure RBAC permissions are enforced.
  • Check state and total_state_change attributes now update as expected based on check history.
  • Incident and entity links in the web UI homepage now navigate to the correct views.
  • The web UI now displays non-standard cron statements correctly (for example, @weekly).
  • On sign-in, the web UI now ensures that users are directed to a valid namespace.
  • In the web UI, code block scrollbars now display only when necessary.
  • The web UI now displays the handler timeout attribute correctly.
  • When editing resources, the web UI now fetches the latest resource prior to editing.
  • The web UI now handles array values correctly when creating and editing resources.

5.9.0 release notes

May 28, 2019 — The latest release of Sensu Go, version 5.9.0, is now available for download. There are some exciting feature additions in this release, including the ability to log raw events to a file (commercial feature) and view event handlers in the web UI.

Read the upgrade guide to upgrade Sensu to version 5.9.0. If you’re upgrading a Sensu cluster from 5.7.0 or earlier, read the instructions for upgrading a Sensu cluster from 5.7.0 or earlier to 5.8.0 or later.

NEW FEATURES:

  • The Sensu web UI now includes a handlers page that displays available event handlers and handler configuration. Read the web UI docs to get started using the Sensu web UI.
  • (Commercial feature) Manage your Sensu event handlers from your browser: Sensu’s web UI now supports creating, editing, and deleting handlers. Read the web UI docs to get started using the Sensu web UI.
  • (Commercial feature) Sensu now supports event logging to a file using the event-log-file and event-log-buffer-size configuration options. You can use this event log file as an input source for your favorite data lake solution. Read the backend reference for more information.

IMPROVEMENTS:

  • The Sensu web UI now includes simpler, more efficient filtering in place of filtering using Sensu query expressions.
  • Sensu packages are now available for Ubuntu 19.04 (Disco Dingo). Review the supported platforms page for a complete list of Sensu’s supported platforms and the installation guide to install Sensu packages for Ubuntu.

FIXES:

  • The occurrences and occurrences_watermark event attributes now increment as expected, giving you useful information about recent events. Read the events reference for an in-depth discussion of these attributes.
  • The /silenced/subscriptions/:subscription and /silenced/checks/:check API endpoints now return silences by check or subscription.
  • Sensu now handles errors when seeding initial data, avoiding a panic state.

5.8.0 release notes

May 22, 2019 — The latest release of Sensu Go, version 5.8.0, is now available for download. This is mainly a stability release with bug fixes and performance improvements. Additionally, we have added support for configurable etcd cipher suites.

Read the upgrade guide to upgrade Sensu to version 5.8.0.

IMPORTANT:

  • To upgrade to Sensu Go 5.8.0, Sensu clusters with multiple backend nodes must be shut down during the upgrade process. Read the upgrade guide for more information.

IMPROVEMENTS:

  • The sensuctl command line tool now supports the --chunk-size flag to help you handle large datasets. Read the sensuctl reference for more information.
  • Sensu backends now support the etcd-cipher-suites configuration option, letting you specify the cipher suites that can be used with etcd TLS configuration. Read the backend reference for more information.
  • The Sensu API now includes the /version API, returning version information for your Sensu instance. Review the API docs for more information.
  • Tessen now collects the numbers of events processed and resources created, giving us better insight into how we can improve Sensu. As always, all Tessen transmissions are logged for complete transparency. Read the Tessen reference for more information.
  • Sensu licenses now include the entity limit attached to your Sensu licensing package. Read the license management docs to learn more about entity limits.
  • Sensu backends now perform better at scale using increased worker pool sizes for events and keepalives.
  • The maximum size of the etcd database and etcd requests is now configurable using the etcd-quota-backend-bytes and etcd-max-request-bytes backend configuration options. These are advanced configuration options requiring familiarly with etcd. Use with caution. Read the backend reference for more information.
  • Most Sensu resources now use ProtoBuf serialization in etcd.

FIXES:

  • Events produced by checks now execute the correct number of write operations to etcd.
  • API pagination tokens for the core/v2/users and core/v2/namespaces API endpoints now work as expected.
  • Keepalive events for deleted and deregistered entities are now cleaned up as expected.

KNOWN ISSUES:

  • Auth tokens may not be purged from etcd, resulting in a possible impact to performance.

5.7.0 release notes

May 9, 2019 — The latest release of Sensu Go, version 5.7.0, is now available for download. This is mainly a stability release with bug fixes. Additionally, we have added support for Windows packages and updated our usage policy.

Read the upgrade guide to upgrade Sensu to version 5.7.0.

IMPROVEMENTS:

  • The Sensu agent for Windows is now available as an MSI package, making it easier to install and operate. Read the installation guide and the agent reference to get started.

FIXES:

  • Sensu now enforces resource separation between namespaces sharing a similar prefix.
  • The sensuctl cluster commands now output correctly in JSON and wrapped JSON formats.
  • The API now returns an error message if label and field selectors are used without a license.

5.6.0 release notes

April 30, 2019 — The latest release of Sensu Go, version 5.6.0, is now available for download. We have added some exciting new features in this release, including API filtering and the ability to create and manage checks through the web UI with the presence of a valid license key.

Read the upgrade guide to upgrade Sensu to version 5.6.0.

NEW FEATURES:

  • (Commercial feature) Manage your Sensu checks from your browser: Sensu’s web user interface now supports creating, editing, and deleting checks. Read the web UI docs to get started using the Sensu web UI.
  • (Commercial feature) The Sensu web UI now includes an option to delete entities.
  • (Commercial feature) Sensu now supports resource filtering in the Sensu API and sensuctl command line tool. Filter events using custom labels and resource attributes, such as event status and check subscriptions. Review the API docs and sensuctl reference for usage examples.

IMPROVEMENTS:

  • (Commercial feature) Sensu’s LDAP and Active Directory integrations now support mutual authentication using the trusted_ca_file, client_cert_file, and client_key_file attributes. Read the guide to configuring an authentication provider for more information.
  • (Commercial feature) Sensu’s LDAP and Active Directory integrations now support connecting to an authentication provider using anonymous binding. Read the LDAP and Active Directory binding configuration docs to learn more.
  • the /health API response now includes the cluster ID.
  • The sensuctl cluster health and sensuctl cluster member-list commands now include the cluster ID in tabular format.

FIXES:

  • You can now configure labels and annotations for Sensu agents using command line flags. For example: sensu-agent start --label example_key="example value". Read the agent reference for more examples.
  • The Sensu web UI now displays the correct checkbox state when no resources are present.

5.5.1 release notes

April 17, 2019 — The latest release of Sensu Go, version 5.5.1, is now available for download. This is a stability release with key bug fixes, including addressing an issue with backend CPU utilization. Additionally, we have added support for honoring the source attribute for events received via agent socket.

Read the upgrade guide to upgrade Sensu to version 5.5.1.

IMPROVEMENTS:

  • Sensu agents now support annotations (non-identifying metadata) that help people or external tools interacting with Sensu. Read the agent reference to add annotations in the agent configuration file.
  • The agent socket event format now supports the source attribute to create a proxy entity.
  • Sensu 5.5.1 is built with Go version 1.12.3.

FIXES:

  • Backends now reinstate etcd watchers in the event of a watcher failure, fixing an issue causing high CPU usage in some components.

5.5.0 release notes

April 4, 2019 — The latest release of Sensu Go, version 5.5.0, is now available for download. This release has some key bug fixes and additions, including the introduction of Tessen into Sensu Go. For more information, read Sean Porter’s blog post on Tessen.

Read the upgrade guide to upgrade Sensu to version 5.5.0.

NEW FEATURES:

  • Tessen, the Sensu call-home service, is now enabled by default in Sensu backends. Read the Tessen docs to learn about the data that Tessen collects.

IMPROVEMENTS:

  • Sensu now includes more verbose check logging to indicate when a proxy request matches an entity according to its entity attributes.

FIXES:

  • The Sensu web UI now displays silences created by LDAP users.
  • The web UI now uses a secondary text color for quick-navigation buttons.

5.4.0 release notes

March 27, 2019 — The latest release of Sensu Go, version 5.4.0, is now available for download. This release has some very exciting feature additions, including the introduction of our new homepage. It also includes support for API pagination to handle large datasets more efficiently and agent buffering for robustness in lower-connectivity situations, along with key bug fixes.

Read the upgrade guide to upgrade Sensu to version 5.4.0.

NEW FEATURES:

  • The Sensu dashboard now includes a homepage designed to highlight the most important monitoring data, giving you instant insight into the state of your infrastructure. read the web UI docs for a preview.
  • The Sensu API now supports pagination using the limit and continue query parameters, letting you limit your API responses to a maximum number of objects and making it easier to handle large datasets. Read the API overview for more information.
  • Sensu now surfaces internal metrics using the /metrics API. Read the /metrics API documentation for more information.

IMPROVEMENTS:

  • Sensu now lets you specify a separate TLS certificate and key to secure the dashboard. Read the backend reference to configure the dashboard-cert-file and dashboard-key-file options, and check out the guide to securing Sensu for the complete guide to making your Sensu instance production-ready.
  • The Sensu agent events API now queues events before sending them to the backend, making the agent events API more robust and preventing data loss in the event of a loss of connection with the backend or agent shutdown. Read the agent reference for more information.

FIXES:

  • The backend now processes events without persisting metrics to etcd.
  • The core/v2/events API POST and PUT endpoints now add the current timestamp to new events by default.
  • The core/v2/users API endpoints now return a 404 response code if a username cannot be found.
  • The sensuctl command line tool now correctly accepts global flags when passed after a subcommand flag (for example, --format yaml --namespace development).
  • The sensuctl handler delete and sensuctl filter delete commands now correctly delete resources from the currently configured namespace.
  • The agent now terminates consistently on SIGTERM and SIGINT.
  • In the event of a loss of connection with the backend, the agent now attempts to reconnect to any backends specified in its configuration.
  • The dashboard now handles cases in which the creator of a silence is inaccessible.
  • The dashboard event details page now displays “-” in the command field if no command is associated with the event.

5.3.0 release notes

March 11, 2019 — The latest release of Sensu Go, version 5.3.0, is now available for download. This release has some very exciting feature additions and key bug fixes. Active Directory can be configured as an authentication provider (commercial feature). Additionally, round robin scheduling has been fully re-implemented and is available for use.

Read the upgrade guide to upgrade Sensu to version 5.3.0.

NEW FEATURES:

  • Round robin check scheduling lets you distribute check executions evenly over a group of Sensu agents. To enable round robin scheduling, set the round_robin check attribute to true. Read the checks reference for more information.
  • Sensu now provides commercial support for using Microsoft Active Directory as an external authentication provider. Read the authentication guide to configure Active Directory, and check out the getting started guide for more information about commercial features.
  • The dashboard now features offline state detection and displays an alert banner if the dashboard loses connection to the backend.

IMPROVEMENTS:

  • The agent socket event format now supports the handlers attribute, giving you the ability to send socket events to a Sensu pipeline. Read the agent reference to learn more about creating and handling monitoring events using the agent socket.
  • Assets now feature improved download performance using buffered I/O.
  • The sensuctl CLI now uses a 15-second timeout period when connecting to the Sensu backend.
  • The dashboard now includes expandable configuration details sections on the check and entity pages. You can now use the dashboard to review check details like command, subscriptions, and scheduling as well as entity details like platform, IP address, and hostname.

SECURITY:

  • Sensu Go 5.3.0 fixes all known TLS vulnerabilities affecting the backend, including increasing the minimum supported TLS version to 1.2 and removing all ciphers except those with perfect forward secrecy.
  • Sensu now enforces uniform TLS configuration for all three backend components: apid, agentd, and dashboardd.
  • The backend no longer requires the trusted-ca-file configuration option when using TLS.
  • The backend no longer loads server TLS configuration for the HTTP client.

FIXES:

  • Sensu can now download assets with download times of more than 30 seconds without timing out.
  • The agent now communicates entity subscriptions to the backend in the correct format.
  • Sensu no longer includes the edition configuration attribute or header.
  • DNS resolution in Alpine Linux containers now uses the built-in Go resolver instead of the glibc resolver.
  • The sensuctl user list command can now output yaml and wrapped-json formats when used with the --format flag.
  • The dashboard check details page now displays long commands correctly.
  • The dashboard check details page now displays the timeout attribute correctly.

5.2.1 release notes

February 11, 2019 — The latest release of Sensu Go, version 5.2.1, is now available for download. This is a stability release with a key bug fix for proxy check functionality.

Read the upgrade guide to upgrade Sensu to version 5.2.1.

FIXES:

  • Sensu agents now execute checks for proxy entities at the expected interval.

5.2.0 release notes

February 7, 2019 — The latest release of Sensu Go, version 5.2.0, is now available for download. This release has a ton of exciting content, including the availability of our first enterprise-only features. For more details on these features, read the blog post about Sensu Go 5.2.0. Release 5.2.0 also has some key improvements and fixes: we added support for self-signed CA certificates for sensuctl, check output truncation, and the ability to manage silencing from the event details page in our web UI, to name a few.

Read the upgrade guide to upgrade Sensu to version 5.2.0.

IMPORTANT:

  • Due to changes in the release process, Sensu binary-only archives are now named following the pattern sensu-enterprise-go_5.2.0_$OS_$ARCH.tar.gz, where $OS is the operating system name and $ARCH is the CPU architecture. These archives include all files in the top-level directory. Read the installation guide for the latest download links.

NEW FEATURES:

IMPROVEMENTS:

  • Sensu now includes support for Debian 8 and 9. Read the installation guide to install Sensu for Debian.
  • Sensu’s binary-only distribution for Linux is now available for arm64, armv5, armv6, armv7, and 386 in addition to amd64. Read the installation guide for download links.
  • The Sensu dashboard now provides the ability to silence and unsilence events from the Events page.
  • The Sensu dashboard Entity page now displays the platform version and deregistration configuration.
  • Sensuctl now supports TLS configuration options, allowing you to use a self-signed certificate without adding it to the operating system’s CA store, either by explicitly trusting the signer or by disabling TLS hostname verification. Read the sensuctl reference for more information.
  • sensuctl now provides action-specific confirmation messages, like Created, Deleted, and Updated.

FIXES:

  • Check TTL failure events now persist through cluster member failures and cluster restarts.
  • The Sensu backend now correctly handles errors for missing keepalive events.
  • Token-substituted values are now omitted from event data to protect sensitive information.
  • Sensu now correctly processes keepalive and check TTL states after entity deletion.
  • Sensuctl can now run sensuctl version without being configured.
  • When disabling users, sensuctl now provides the correct prompt for the action.

5.1.1 release notes

January 24, 2019 — The latest patch release of Sensu Go, version 5.1.1, is now available for download. This release includes some key fixes and improvements, including refactored keepalive functionality with increased reliability. Additionally, based on community feedback, we have added support for the Sensu agent and sensuctl for 32-bit Windows systems.

Read the upgrade guide to upgrade Sensu to version 5.1.1.

NEW FEATURES:

IMPROVEMENTS:

  • The Sensu agent and sensuctl tool are now available for 32-bit Windows. Read the installation guide for instructions.
  • Keepalive events now include an output attribute specifying the entity name and time last sent.
  • The Sensu backend includes refactored authentication and licensing to support future enterprise features.

SECURITY:

  • Sensu 5.1.1 is built with Go version 1.11.5. Go 1.11.5 addresses a security vulnerability that affects TLS handshakes and JWT tokens. Read the CVE for more information.

FIXES:

  • Keepalive events now continue to execute after a Sensu cluster restarts.
  • When requested, on-demand check executions now correctly retrieve asset dependencies.
  • Checks now maintain a consistent execution schedule after updates to the check definition.
  • Proxy check request errors now include the check name and namespace.
  • When encountering an invalid line during metric extraction, Sensu now logs an error and continues extraction.
  • Sensuctl now returns an error when attempting to delete a non-existent entity.
  • Sensuctl now removes the temporary file it creates when executing the sensuctl edit command.
  • The Sensu dashboard now recovers from errors correctly when shutting down.
  • The Sensu dashboard includes better visibility for buttons and menus in the dark theme.

5.1.0 release notes

December 19, 2018 — The latest release of Sensu Go, version 5.1.0, is now available for download. This release includes an important change to the Sensu backend state directory as well as support for Ubuntu 14.04 and some key bug fixes.

Read the upgrade guide to upgrade Sensu to version 5.1.0.

IMPORTANT:

NOTE: This applies only to Sensu backend binaries downloaded from s3-us-west-2.amazonaws.com/sensu.io/sensu-go, not to Sensu RPM or DEB packages.

  • For Sensu backend binaries, the default state-dir is now /var/lib/sensu/sensu-backend instead of /var/lib/sensu. To upgrade your Sensu backend binary to 5.1.0, make sure your /etc/sensu/backend.yml configuration file specifies a state-dir. Read the upgrade guide for more information.

NEW FEATURES:

  • Sensu agents now include trusted-ca-file and insecure-skip-tls-verify configuration options, giving you more flexibility with certificates when connecting agents to the backend over TLS.

IMPROVEMENTS:

  • Sensu now includes support for Ubuntu 14.04.

FIXES:

  • The Sensu backend now successfully connects to an external etcd cluster.
  • SysVinit scripts for the Sensu agent and backend now include correct run and log paths.
  • Once created, keepalive alerts and check TTL failure events now continue to occur until a successful event is observed.
  • When querying for an empty list of assets, sensuctl and the Sensu API now return an empty array instead of null.
  • The sensuctl create command now successfully creates hooks when provided with the correct definition.
  • The Sensu dashboard now renders status icons correctly in Firefox.

5.0.1 release notes

December 12, 2018 — Sensu Go 5.0.1 includes our top bug fixes following last week’s general availability release.

Read the upgrade guide to upgrade Sensu to version 5.0.1.

FIXED:

  • The Sensu backend can now successfully connect to an external etcd cluster.
  • The Sensu dashboard now sorts silences in ascending order, correctly displays status values, and reduces shuffling in the event list.
  • Sensu agents on Windows now execute command arguments correctly.
  • Sensu agents now correctly include environment variables when executing checks.
  • Command arguments are no longer escaped on Windows.
  • Sensu backend environments now include handler and mutator execution requests.

5.0.0 release notes

December 5, 2018 — We’re excited to announce the general availability release of Sensu Go! Sensu Go is the flexible monitoring event pipeline written in Go and designed for container-based and hybrid-cloud infrastructures. Check out the Sensu blog for more information about Sensu Go and version 5.0.

For a complete list of changes from Beta 8-1, review the Sensu Go changelog. This page will be the official home for the Sensu Go changelog and release notes.

To get started with Sensu Go: